squadrant 0.18.0 → 0.18.1

package/dist/index.js

@@ -9,15 +9,87 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// packages/shared/dist/config.js
+// packages/shared/dist/lib/config-io.js
 import fs from "fs";
 import path from "path";
+function tightenModeSync(p, expectedMode) {
+  try {
+    if (!fs.existsSync(p))
+      return;
+    const stat2 = fs.statSync(p);
+    const currentMode = stat2.mode & 4095;
+    if ((currentMode & ~expectedMode) !== 0) {
+      fs.chmodSync(p, expectedMode);
+      if (!didLogMigration) {
+        console.warn(`\x1B[33m\u26A0\x1B[0m squadrant: tightened config file permissions (security fix #668)`);
+        didLogMigration = true;
+      }
+    }
+  } catch {
+  }
+}
+function writeConfigFileSync(filePath, content) {
+  ensureDirSync(path.dirname(filePath));
+  fs.writeFileSync(filePath, content, { mode: 384 });
+  tightenModeSync(filePath, 384);
+}
+function ensureDirSync(dirPath) {
+  if (dirPath !== CONFIG_DIR && !dirPath.startsWith(CONFIG_DIR + path.sep)) {
+    fs.mkdirSync(dirPath, { recursive: true });
+    return;
+  }
+  fs.mkdirSync(dirPath, { recursive: true, mode: 448 });
+  let current = dirPath;
+  while (current === CONFIG_DIR || current.startsWith(CONFIG_DIR + path.sep)) {
+    tightenModeSync(current, 448);
+    if (current === CONFIG_DIR)
+      break;
+    const parent = path.dirname(current);
+    if (parent === current)
+      break;
+    current = parent;
+  }
+}
+function readConfigFileSync(filePath) {
+  return fs.readFileSync(filePath, "utf-8");
+}
+function migrateConfigPermsSync() {
+  if (migrationRun)
+    return;
+  migrationRun = true;
+  tightenModeSync(CONFIG_DIR, 448);
+  tightenModeSync(path.join(CONFIG_DIR, "config.json"), 384);
+  const projectsDir = path.join(CONFIG_DIR, "projects");
+  tightenModeSync(projectsDir, 448);
+  try {
+    if (fs.existsSync(projectsDir)) {
+      const files = fs.readdirSync(projectsDir);
+      for (const file of files) {
+        if (file.endsWith(".json")) {
+          tightenModeSync(path.join(projectsDir, file), 384);
+        }
+      }
+    }
+  } catch {
+  }
+}
+var didLogMigration, migrationRun;
+var init_config_io = __esm({
+  "packages/shared/dist/lib/config-io.js"() {
+    init_config();
+    didLogMigration = false;
+    migrationRun = false;
+  }
+});
+
+// packages/shared/dist/config.js
+import path2 from "path";
 import os from "os";
 import chalk from "chalk";
 function getDefaultConfig() {
   return {
     commandName: "\u{1F3DB}\uFE0F command",
-    hubVault: path.join(os.homedir(), "squadrant-hub"),
+    hubVault: path2.join(os.homedir(), "squadrant-hub"),
     projects: {},
     agents: {
       claude: { cli: "claude", driver: "claude" }
@@ -61,13 +133,14 @@ function getDefaultConfig() {
     },
     metrics: {
       enabled: true,
-      path: path.join(CONFIG_DIR, "metrics.json")
+      path: path2.join(CONFIG_DIR, "metrics.json")
     }
   };
 }
 function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
+  migrateConfigPermsSync();
   try {
-    const raw = fs.readFileSync(configPath, "utf-8");
+    const raw = readConfigFileSync(configPath);
     const config = JSON.parse(raw);
     if (config.defaults.models && !config.defaults.roles) {
       const m = config.defaults.models;
@@ -92,34 +165,32 @@ function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
   }
 }
 function saveConfig(config, configPath = DEFAULT_CONFIG_PATH) {
-  const dir = path.dirname(configPath);
-  fs.mkdirSync(dir, { recursive: true });
-  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+  writeConfigFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
 }
 function resolveHome(p) {
   return p.startsWith("~") ? p.replace("~", os.homedir()) : p;
 }
-var CONFIG_DIR, DEFAULT_CONFIG_PATH;
+var DEFAULT_CONFIG_PATH, CONFIG_DIR;
 var init_config = __esm({
   "packages/shared/dist/config.js"() {
-    CONFIG_DIR = path.join(os.homedir(), ".config", "squadrant");
-    DEFAULT_CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
+    init_config_io();
+    DEFAULT_CONFIG_PATH = process.env.SQUADRANT_CONFIG || path2.join(os.homedir(), ".config", "squadrant", "config.json");
+    CONFIG_DIR = path2.dirname(DEFAULT_CONFIG_PATH);
   }
 });
 
 // packages/shared/dist/project-config.js
-import fs2 from "fs";
 import os2 from "os";
-import path2 from "path";
+import path3 from "path";
 function defaultRoot() {
-  return path2.join(os2.homedir(), ".config", "squadrant");
+  return path3.join(os2.homedir(), ".config", "squadrant");
 }
 function projectConfigPath(name, root = defaultRoot()) {
-  return path2.join(root, "projects", `${name}.json`);
+  return path3.join(root, "projects", `${name}.json`);
 }
 function loadProjectOverride(name, root = defaultRoot()) {
   try {
-    return JSON.parse(fs2.readFileSync(projectConfigPath(name, root), "utf-8"));
+    return JSON.parse(readConfigFileSync(projectConfigPath(name, root)));
   } catch {
     return {};
   }
@@ -136,8 +207,7 @@ function deepMerge(base, patch) {
 function saveProjectOverride(name, patch, root = defaultRoot()) {
   const merged = deepMerge(loadProjectOverride(name, root), patch);
   const file = projectConfigPath(name, root);
-  fs2.mkdirSync(path2.dirname(file), { recursive: true });
-  fs2.writeFileSync(file, JSON.stringify(merged, null, 2) + "\n");
+  writeConfigFileSync(file, JSON.stringify(merged, null, 2) + "\n");
 }
 function crewRank(tier) {
   return CREW_RANK[tier];
@@ -162,6 +232,7 @@ function resolveNotify(globalNotify, override) {
 var DEFAULT_NOTIFY, CREW_RANK;
 var init_project_config = __esm({
   "packages/shared/dist/project-config.js"() {
+    init_config_io();
     DEFAULT_NOTIFY = { active: false, cap: true, crew: "alert_only" };
     CREW_RANK = { none: 0, done_only: 1, alert_only: 2, all: 3 };
   }
@@ -234,22 +305,22 @@ function defaultCmuxConfigPath() {
   return join(homedir(), ".config", "cmux", "cmux.json");
 }
 function ensureSocketAutomation(opts = {}) {
-  const path34 = opts.path ?? defaultCmuxConfigPath();
-  if (!existsSync(path34)) {
-    mkdirSync(dirname(path34), { recursive: true });
-    writeFileSync(path34, MINIMAL_TEMPLATE);
-    return { path: path34, changed: true, alreadySet: false };
+  const path35 = opts.path ?? defaultCmuxConfigPath();
+  if (!existsSync(path35)) {
+    mkdirSync(dirname(path35), { recursive: true });
+    writeFileSync(path35, MINIMAL_TEMPLATE);
+    return { path: path35, changed: true, alreadySet: false };
   }
-  const text = readFileSync(path34, "utf-8");
+  const text = readFileSync(path35, "utf-8");
   const current = parse(text)?.automation?.socketControlMode;
   if (current === AUTOMATION_MODE) {
-    return { path: path34, changed: false, alreadySet: true };
+    return { path: path35, changed: false, alreadySet: true };
   }
   const edits = modify(text, [...SOCKET_CONTROL_MODE_PATH], AUTOMATION_MODE, {
     formattingOptions: { insertSpaces: true, tabSize: 2 }
   });
-  writeFileSync(path34, applyEdits(text, edits));
-  return { path: path34, changed: true, alreadySet: false };
+  writeFileSync(path35, applyEdits(text, edits));
+  return { path: path35, changed: true, alreadySet: false };
 }
 var SOCKET_CONTROL_MODE_PATH, AUTOMATION_MODE, MINIMAL_TEMPLATE;
 var init_cmux_config = __esm({
@@ -396,15 +467,15 @@ writeFileSync(resultFile, JSON.stringify(result));
 });
 
 // packages/shared/dist/lib/cmux-autoconfig.js
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync4, rmSync as rmSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname2, join as join4 } from "path";
+import { join as join4 } from "path";
 function defaultStatePath() {
   return join4(homedir3(), ".config", "squadrant", "state", "cmux-autoconfig.json");
 }
-function readState(path34) {
+function readState(path35) {
   try {
-    return JSON.parse(readFileSync4(path34, "utf-8"));
+    return JSON.parse(readConfigFileSync(path35));
   } catch {
     return {};
   }
@@ -420,8 +491,7 @@ async function ensureCmuxAutoConfig(opts = {}) {
   if (needsRestart) {
     const already = readState(statePath2).promptedRestart === true;
     if (!already) {
-      mkdirSync2(dirname2(statePath2), { recursive: true });
-      writeFileSync3(statePath2, JSON.stringify({ promptedRestart: true }));
+      writeConfigFileSync(statePath2, JSON.stringify({ promptedRestart: true }));
       promptedThisRun = true;
     }
   } else if (verdict === "reachable") {
@@ -441,6 +511,7 @@ var init_cmux_autoconfig = __esm({
   "packages/shared/dist/lib/cmux-autoconfig.js"() {
     init_cmux_config();
     init_cmux_probe();
+    init_config_io();
   }
 });
 
@@ -624,8 +695,8 @@ var init_config_version = __esm({
 });
 
 // packages/shared/dist/lib/update-check.js
-import fs3 from "fs";
-import path3 from "path";
+import fs2 from "fs";
+import path4 from "path";
 import os3 from "os";
 import https from "https";
 function isUpdateCheckDisabled(config, env = process.env) {
@@ -648,8 +719,25 @@ function isNewerVersion(latest, current) {
     return lb > cb;
   return lc > cc;
 }
-function formatUpdateNotice(latest, current) {
-  return `\u2B06 squadrant ${latest} available (you have ${current}) \u2014 npm i -g squadrant@latest`;
+function detectInstallManager(modulePath = import.meta.url) {
+  if (modulePath.includes("Library/pnpm/") || modulePath.includes("/pnpm/"))
+    return "pnpm";
+  if (modulePath.includes("/yarn/global/node_modules/"))
+    return "yarn";
+  return "npm";
+}
+function upgradeCommandFor(manager) {
+  switch (manager) {
+    case "pnpm":
+      return "pnpm add -g squadrant@latest";
+    case "yarn":
+      return "yarn global add squadrant@latest";
+    case "npm":
+      return "npm i -g squadrant@latest";
+  }
+}
+function formatUpdateNotice(latest, current, modulePath = import.meta.url) {
+  return `\u2B06 squadrant ${latest} available (you have ${current}) \u2014 ${upgradeCommandFor(detectInstallManager(modulePath))}`;
 }
 async function fetchLatestVersion(requestFn = requestJson, timeoutMs = FETCH_TIMEOUT_MS) {
   const timeout = new Promise((resolve4) => {
@@ -681,15 +769,15 @@ async function checkForUpdate(opts) {
 }
 function readUpdateCheckState(statePath2 = UPDATE_CHECK_STATE_PATH) {
   try {
-    return JSON.parse(fs3.readFileSync(statePath2, "utf-8"));
+    return JSON.parse(fs2.readFileSync(statePath2, "utf-8"));
   } catch {
     return void 0;
   }
 }
 function writeUpdateCheckState(state, statePath2 = UPDATE_CHECK_STATE_PATH) {
   try {
-    fs3.mkdirSync(path3.dirname(statePath2), { recursive: true });
-    fs3.writeFileSync(statePath2, JSON.stringify(state, null, 2) + "\n");
+    fs2.mkdirSync(path4.dirname(statePath2), { recursive: true });
+    fs2.writeFileSync(statePath2, JSON.stringify(state, null, 2) + "\n");
   } catch {
   }
 }
@@ -720,7 +808,7 @@ ${line}
 var UPDATE_CHECK_STATE_PATH, REGISTRY_URL, CHECK_INTERVAL_MS, FAILURE_RETRY_MS, FETCH_TIMEOUT_MS, requestJson;
 var init_update_check = __esm({
   "packages/shared/dist/lib/update-check.js"() {
-    UPDATE_CHECK_STATE_PATH = path3.join(os3.homedir(), ".config", "squadrant", "update-check.json");
+    UPDATE_CHECK_STATE_PATH = path4.join(os3.homedir(), ".config", "squadrant", "update-check.json");
     REGISTRY_URL = "https://registry.npmjs.org/squadrant/latest";
     CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
     FAILURE_RETRY_MS = 60 * 60 * 1e3;
@@ -752,10 +840,10 @@ var init_update_check = __esm({
 
 // packages/shared/dist/lib/git-worktree.js
 import { execFileSync as execFileSync2 } from "child_process";
-import fs4 from "fs";
-import path4 from "path";
+import fs3 from "fs";
+import path5 from "path";
 function worktreePath(repoRoot, worktreeDir, project, name) {
-  return path4.resolve(repoRoot, worktreeDir, `${project}-${name}`);
+  return path5.resolve(repoRoot, worktreeDir, `${project}-${name}`);
 }
 function crewBranch(name) {
   return `crew/${name}`;
@@ -764,11 +852,11 @@ function ensureSpotlightExcluded(repoRoot, worktreeDir) {
   if (process.platform !== "darwin")
     return;
   try {
-    const dir = path4.resolve(repoRoot, worktreeDir);
-    fs4.mkdirSync(dir, { recursive: true });
-    const marker = path4.join(dir, ".metadata_never_index");
-    if (!fs4.existsSync(marker))
-      fs4.writeFileSync(marker, "");
+    const dir = path5.resolve(repoRoot, worktreeDir);
+    fs3.mkdirSync(dir, { recursive: true });
+    const marker = path5.join(dir, ".metadata_never_index");
+    if (!fs3.existsSync(marker))
+      fs3.writeFileSync(marker, "");
   } catch {
   }
 }
@@ -830,15 +918,15 @@ function addWorktree(spec) {
   return wt;
 }
 function installWorktreeDependencies(wt) {
-  if (!fs4.existsSync(path4.join(wt, "package.json")))
+  if (!fs3.existsSync(path5.join(wt, "package.json")))
     return;
-  if (fs4.existsSync(path4.join(wt, "pnpm-lock.yaml"))) {
+  if (fs3.existsSync(path5.join(wt, "pnpm-lock.yaml"))) {
     execFileSync2("pnpm", ["-C", wt, "install", "--frozen-lockfile"], { stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "yarn.lock"))) {
+  } else if (fs3.existsSync(path5.join(wt, "yarn.lock"))) {
     execFileSync2("yarn", ["install", "--frozen-lockfile"], { cwd: wt, stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "package-lock.json"))) {
+  } else if (fs3.existsSync(path5.join(wt, "package-lock.json"))) {
     execFileSync2("npm", ["ci"], { cwd: wt, stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "bun.lockb"))) {
+  } else if (fs3.existsSync(path5.join(wt, "bun.lockb"))) {
     execFileSync2("bun", ["install", "--frozen-lockfile"], { cwd: wt, stdio: "pipe" });
   } else {
     process.stderr.write(`worktree ${wt}: package.json present but no lockfile \u2014 dependencies not installed; local typechecks/tests may resolve against the main checkout instead of this worktree.
@@ -862,7 +950,7 @@ var init_git_worktree = __esm({
 });
 
 // packages/shared/dist/lib/resolve-text-input.js
-import fs5 from "fs";
+import fs4 from "fs";
 async function readAllStdin() {
   const chunks = [];
   for await (const chunk of process.stdin) {
@@ -874,7 +962,7 @@ function flagName(label) {
   return label === "task" ? "--task-file" : "--message-file";
 }
 async function resolveTextInput(opts, deps) {
-  const readFile6 = deps?.readFile ?? ((p) => fs5.readFileSync(p, "utf8"));
+  const readFile6 = deps?.readFile ?? ((p) => fs4.readFileSync(p, "utf8"));
   const readStdin3 = deps?.readStdin ?? readAllStdin;
   if (opts.filePath) {
     if (opts.filePath === "-") {
@@ -902,75 +990,75 @@ var init_resolve_text_input = __esm({
 });
 
 // packages/shared/dist/lib/runtime-sync.js
-import fs6 from "fs";
-import path5 from "path";
+import fs5 from "fs";
+import path6 from "path";
 function copyIfDifferent(src, dest) {
-  if (fs6.existsSync(dest)) {
-    if (fs6.readFileSync(src).equals(fs6.readFileSync(dest)))
+  if (fs5.existsSync(dest)) {
+    if (fs5.readFileSync(src).equals(fs5.readFileSync(dest)))
       return false;
   }
-  fs6.copyFileSync(src, dest);
+  fs5.copyFileSync(src, dest);
   return true;
 }
 function mirrorDir(src, dest) {
-  fs6.mkdirSync(dest, { recursive: true });
-  const srcEntries = fs6.readdirSync(src, { withFileTypes: true });
+  fs5.mkdirSync(dest, { recursive: true });
+  const srcEntries = fs5.readdirSync(src, { withFileTypes: true });
   const srcNames = new Set(srcEntries.map((e) => e.name));
   for (const entry of srcEntries) {
-    const srcPath = path5.join(src, entry.name);
-    const destPath = path5.join(dest, entry.name);
+    const srcPath = path6.join(src, entry.name);
+    const destPath = path6.join(dest, entry.name);
     if (entry.isDirectory()) {
       mirrorDir(srcPath, destPath);
     } else {
       copyIfDifferent(srcPath, destPath);
     }
   }
-  for (const entry of fs6.readdirSync(dest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(dest, { withFileTypes: true })) {
     if (!srcNames.has(entry.name)) {
-      fs6.rmSync(path5.join(dest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(dest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function mirrorFlat(src, dest, match, chmod) {
-  fs6.mkdirSync(dest, { recursive: true });
-  const matched = fs6.readdirSync(src, { withFileTypes: true }).filter((e) => e.isFile() && match.test(e.name)).map((e) => e.name);
+  fs5.mkdirSync(dest, { recursive: true });
+  const matched = fs5.readdirSync(src, { withFileTypes: true }).filter((e) => e.isFile() && match.test(e.name)).map((e) => e.name);
   const matchedSet = new Set(matched);
   for (const name of matched) {
-    const destPath = path5.join(dest, name);
-    const copied = copyIfDifferent(path5.join(src, name), destPath);
+    const destPath = path6.join(dest, name);
+    const copied = copyIfDifferent(path6.join(src, name), destPath);
     if (copied && chmod !== void 0)
-      fs6.chmodSync(destPath, chmod);
+      fs5.chmodSync(destPath, chmod);
   }
-  for (const entry of fs6.readdirSync(dest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(dest, { withFileTypes: true })) {
     if (!matchedSet.has(entry.name)) {
-      fs6.rmSync(path5.join(dest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(dest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function mirrorPluginSubset(src, dest, skills) {
-  fs6.mkdirSync(dest, { recursive: true });
-  mirrorDir(path5.join(src, ".claude-plugin"), path5.join(dest, ".claude-plugin"));
-  const skillsDest = path5.join(dest, "skills");
-  fs6.mkdirSync(skillsDest, { recursive: true });
+  fs5.mkdirSync(dest, { recursive: true });
+  mirrorDir(path6.join(src, ".claude-plugin"), path6.join(dest, ".claude-plugin"));
+  const skillsDest = path6.join(dest, "skills");
+  fs5.mkdirSync(skillsDest, { recursive: true });
   for (const name of skills) {
-    const skillSrc = path5.join(src, "skills", name);
-    if (fs6.existsSync(skillSrc))
-      mirrorDir(skillSrc, path5.join(skillsDest, name));
+    const skillSrc = path6.join(src, "skills", name);
+    if (fs5.existsSync(skillSrc))
+      mirrorDir(skillSrc, path6.join(skillsDest, name));
   }
-  for (const entry of fs6.readdirSync(skillsDest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(skillsDest, { withFileTypes: true })) {
     if (!skills.includes(entry.name)) {
-      fs6.rmSync(path5.join(skillsDest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(skillsDest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function ensureRuntimeSynced(opts) {
   const targets = opts.targets ?? MANAGED_TARGETS;
   for (const t of targets) {
-    const srcDir = path5.join(opts.sourceRoot, t.srcRel);
+    const srcDir = path6.join(opts.sourceRoot, t.srcRel);
     try {
-      if (!fs6.existsSync(srcDir))
+      if (!fs5.existsSync(srcDir))
         continue;
-      const destDir = path5.join(opts.runtimeRoot, t.name);
+      const destDir = path6.join(opts.runtimeRoot, t.name);
       if (t.mode === "tree") {
         mirrorDir(srcDir, destDir);
       } else if (t.mode === "flat") {
@@ -1038,8 +1126,8 @@ var init_tool_compat = __esm({
 });
 
 // packages/shared/dist/lib/canonical-source.js
-import fs7 from "fs";
-import path6 from "path";
+import fs6 from "fs";
+import path7 from "path";
 function parseSkill(raw) {
   const match = raw.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
   if (!match)
@@ -1080,10 +1168,10 @@ async function readSkills(driver, skillsDir) {
 function readRoleTemplates(opts) {
   if (!opts.pkgRoot)
     return "";
-  const reader = opts.readFile ?? ((p) => fs7.readFileSync(p, "utf-8"));
+  const reader = opts.readFile ?? ((p) => fs6.readFileSync(p, "utf-8"));
   const sections = [];
   for (const { file, heading } of ROLE_TEMPLATES) {
-    const full = path6.join(opts.pkgRoot, "templates", file);
+    const full = path7.join(opts.pkgRoot, "templates", file);
     let body = "";
     try {
       body = reader(full);
@@ -1120,8 +1208,8 @@ var init_canonical_source = __esm({
 
 // packages/shared/dist/lib/daily-logs.js
 import { execSync } from "child_process";
-import fs8 from "fs";
-import path7 from "path";
+import fs7 from "fs";
+import path8 from "path";
 import matter from "gray-matter";
 function iso(d) {
   return d.toISOString().slice(0, 10);
@@ -1173,7 +1261,7 @@ function getGitCommits(projectPath, dateStr) {
 }
 function getGitCommitsInRange(projectPath, since, until) {
   const resolved = resolveHome(projectPath);
-  if (!fs8.existsSync(path7.join(resolved, ".git")))
+  if (!fs7.existsSync(path8.join(resolved, ".git")))
     return [];
   const untilArg = until ? ` --until="${until}"` : "";
   try {
@@ -1187,7 +1275,7 @@ function getGitCommitsInRange(projectPath, since, until) {
 }
 function getMergedPRsInRange(projectPath, since, until) {
   const resolved = resolveHome(projectPath);
-  if (!fs8.existsSync(path7.join(resolved, ".git")))
+  if (!fs7.existsSync(path8.join(resolved, ".git")))
     return [];
   const untilArg = until ? ` --until="${until}"` : "";
   try {
@@ -1247,6 +1335,7 @@ var init_daemon_keys = __esm({
 var dist_exports = {};
 __export(dist_exports, {
   AUTOMATION_MODE: () => AUTOMATION_MODE,
+  CONFIG_DIR: () => CONFIG_DIR,
   CREW_SKILLS: () => CREW_SKILLS,
   DEFAULT_CONFIG_PATH: () => DEFAULT_CONFIG_PATH,
   DEFAULT_NOTIFY: () => DEFAULT_NOTIFY,
@@ -1270,7 +1359,9 @@ __export(dist_exports, {
   defaultCmuxConfigPath: () => defaultCmuxConfigPath,
   defaultStatePath: () => defaultStatePath,
   detectDrift: () => detectDrift,
+  detectInstallManager: () => detectInstallManager,
   ensureCmuxAutoConfig: () => ensureCmuxAutoConfig,
+  ensureDirSync: () => ensureDirSync,
   ensureRuntimeSynced: () => ensureRuntimeSynced,
   ensureSocketAutomation: () => ensureSocketAutomation,
   ensureSpokeLayout: () => ensureSpokeLayout,
@@ -1289,6 +1380,7 @@ __export(dist_exports, {
   iso: () => iso,
   loadConfig: () => loadConfig,
   loadProjectOverride: () => loadProjectOverride,
+  migrateConfigPermsSync: () => migrateConfigPermsSync,
   mirrorDir: () => mirrorDir,
   mirrorFlat: () => mirrorFlat,
   needsCheck: () => needsCheck,
@@ -1296,6 +1388,7 @@ __export(dist_exports, {
   parseSection: () => parseSection,
   probeCmuxDaemonDirect: () => probeCmuxDaemonDirect,
   projectConfigPath: () => projectConfigPath,
+  readConfigFileSync: () => readConfigFileSync,
   readDailyLog: () => readDailyLog,
   readProjectLevelSource: () => readProjectLevelSource,
   readStamp: () => readStamp,
@@ -1314,6 +1407,7 @@ __export(dist_exports, {
   withStamp: () => withStamp,
   worktreeDirtyFiles: () => worktreeDirtyFiles,
   worktreePath: () => worktreePath,
+  writeConfigFileSync: () => writeConfigFileSync,
   writeUpdateCheckState: () => writeUpdateCheckState
 });
 var init_dist = __esm({
@@ -1335,6 +1429,7 @@ var init_dist = __esm({
     init_config_drift();
     init_config_version();
     init_update_check();
+    init_config_io();
     init_git_worktree();
     init_resolve_text_input();
     init_runtime_sync();
@@ -1974,7 +2069,7 @@ var init_reduce = __esm({
 });
 
 // packages/core/dist/mailbox.js
-import { promises as fs9 } from "fs";
+import { promises as fs8 } from "fs";
 import { join as join5 } from "path";
 import { randomUUID } from "crypto";
 function inboxDir(stateRoot) {
@@ -1991,7 +2086,7 @@ async function listRotatedOldestFirst(stateRoot, project) {
   const dir = inboxDir(stateRoot);
   let entries;
   try {
-    entries = await fs9.readdir(dir);
+    entries = await fs8.readdir(dir);
   } catch {
     return [];
   }
@@ -2000,7 +2095,7 @@ async function listRotatedOldestFirst(stateRoot, project) {
 }
 async function readMaxSeqFromFile(file) {
   try {
-    const buf = await fs9.readFile(file, "utf-8");
+    const buf = await fs8.readFile(file, "utf-8");
     if (!buf.trim())
       return 0;
     const lines = buf.trim().split("\n");
@@ -2041,12 +2136,12 @@ function withProjectLock(project, fn) {
 function appendEntry(stateRoot, project, build) {
   return withProjectLock(project, async () => {
     const dir = inboxDir(stateRoot);
-    await fs9.mkdir(dir, { recursive: true });
+    await fs8.mkdir(dir, { recursive: true });
     const file = logPath(stateRoot, project);
     const lastSeq = await readMaxSeq(stateRoot, project);
     const seq = lastSeq + 1;
     const entry = build(seq);
-    await fs9.appendFile(file, JSON.stringify(entry) + "\n", { encoding: "utf-8" });
+    await fs8.appendFile(file, JSON.stringify(entry) + "\n", { encoding: "utf-8" });
     return seq;
   });
 }
@@ -2077,7 +2172,7 @@ function cursorPath(stateRoot, project, subscriber) {
 async function readCursor(opts) {
   let buf;
   try {
-    buf = await fs9.readFile(cursorPath(opts.stateRoot, opts.project, opts.subscriber), "utf-8");
+    buf = await fs8.readFile(cursorPath(opts.stateRoot, opts.project, opts.subscriber), "utf-8");
   } catch (e) {
     if (e.code === "ENOENT")
       return null;
@@ -2104,7 +2199,7 @@ async function waitForCaptainDelivery(opts) {
   }
 }
 async function writeCursor(opts) {
-  await fs9.mkdir(inboxDir(opts.stateRoot), { recursive: true });
+  await fs8.mkdir(inboxDir(opts.stateRoot), { recursive: true });
   const dest = cursorPath(opts.stateRoot, opts.project, opts.subscriber);
   const tmp = `${dest}.${process.pid}.${randomUUID()}.tmp`;
   const data = {
@@ -2112,7 +2207,7 @@ async function writeCursor(opts) {
     subscriber: opts.subscriber,
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const handle = await fs9.open(tmp, "w");
+  const handle = await fs8.open(tmp, "w");
   try {
     await handle.writeFile(JSON.stringify(data), { encoding: "utf-8" });
     await handle.sync();
@@ -2120,9 +2215,9 @@ async function writeCursor(opts) {
     await handle.close();
   }
   try {
-    await fs9.rename(tmp, dest);
+    await fs8.rename(tmp, dest);
   } catch (e) {
-    await fs9.unlink(tmp).catch(() => {
+    await fs8.unlink(tmp).catch(() => {
     });
     throw e;
   }
@@ -2133,7 +2228,7 @@ async function* readFromCursor(opts) {
   for (const file of files) {
     let buf;
     try {
-      buf = await fs9.readFile(file, "utf-8");
+      buf = await fs8.readFile(file, "utf-8");
     } catch (e) {
       if (e.code === "ENOENT")
         continue;
@@ -2159,7 +2254,7 @@ async function mailboxStats(stateRoot, project) {
   let sizeBytes = 0;
   for (const f of [file, ...rotated]) {
     try {
-      sizeBytes += (await fs9.stat(f)).size;
+      sizeBytes += (await fs8.stat(f)).size;
     } catch (e) {
       if (e.code !== "ENOENT")
         throw e;
@@ -2175,7 +2270,7 @@ async function mailboxStats(stateRoot, project) {
 }
 async function oldestEntryAgeMs(file) {
   try {
-    const buf = await fs9.readFile(file, "utf-8");
+    const buf = await fs8.readFile(file, "utf-8");
     const firstLine2 = buf.split("\n").find((l) => l.trim());
     if (!firstLine2)
       return 0;
@@ -2190,7 +2285,7 @@ async function rotateIfNeeded(opts) {
     const file = logPath(opts.stateRoot, opts.project);
     let size = 0;
     try {
-      size = (await fs9.stat(file)).size;
+      size = (await fs8.stat(file)).size;
     } catch (e) {
       if (e.code === "ENOENT")
         return { rotated: false };
@@ -2206,22 +2301,22 @@ async function rotateIfNeeded(opts) {
       const dst = `${file}.${n + 1}`;
       if (n + 1 > opts.keepCount) {
         try {
-          await fs9.unlink(src);
+          await fs8.unlink(src);
         } catch (e) {
           if (e.code !== "ENOENT")
             throw e;
         }
       } else {
         try {
-          await fs9.rename(src, dst);
+          await fs8.rename(src, dst);
         } catch (e) {
           if (e.code !== "ENOENT")
             throw e;
         }
       }
     }
-    await fs9.rename(file, `${file}.1`);
-    await fs9.writeFile(file, "", { encoding: "utf-8" });
+    await fs8.rename(file, `${file}.1`);
+    await fs8.writeFile(file, "", { encoding: "utf-8" });
     return { rotated: true, from: file, to: `${file}.1` };
   });
 }
@@ -2234,7 +2329,7 @@ var init_mailbox = __esm({
 
 // packages/core/dist/protocol.js
 import { createServer, createConnection } from "net";
-import { existsSync as existsSync5, unlinkSync } from "fs";
+import { existsSync as existsSync5, unlinkSync, chmodSync } from "fs";
 function encodeMsg(obj) {
   return JSON.stringify(obj) + "\n";
 }
@@ -2347,6 +2442,12 @@ function startServer(sockPath, handlerOrCallbacks, onListenError = defaultListen
     });
   });
   server.on("error", onListenError);
+  server.on("listening", () => {
+    try {
+      chmodSync(sockPath, 384);
+    } catch {
+    }
+  });
   server.listen(sockPath);
   return server;
 }
@@ -2530,7 +2631,7 @@ var init_liveness2 = __esm({
 });
 
 // packages/core/dist/store.js
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, readdirSync, renameSync, writeFileSync as writeFileSync4, existsSync as existsSync6, rmSync as rmSync3, statSync } from "fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync4, readdirSync, renameSync, writeFileSync as writeFileSync3, existsSync as existsSync6, rmSync as rmSync3, statSync } from "fs";
 import { join as join6, resolve, sep } from "path";
 function safeSegment(kind, s) {
   if (typeof s !== "string" || s.length === 0) {
@@ -2556,10 +2657,10 @@ function createStore(root) {
   const taskFile = (p, id) => assertUnderRoot(join6(projDir(p), `${safeSegment("id", id)}.json`));
   return {
     put(rec) {
-      mkdirSync3(projDir(rec.project), { recursive: true });
+      mkdirSync2(projDir(rec.project), { recursive: true });
       const dest = taskFile(rec.project, rec.id);
       const tmp = `${dest}.tmp`;
-      writeFileSync4(tmp, JSON.stringify(rec, null, 2));
+      writeFileSync3(tmp, JSON.stringify(rec, null, 2));
       renameSync(tmp, dest);
     },
     get(project, id) {
@@ -2567,7 +2668,7 @@ function createStore(root) {
       if (!existsSync6(f))
         return void 0;
       try {
-        return JSON.parse(readFileSync5(f, "utf-8"));
+        return JSON.parse(readFileSync4(f, "utf-8"));
       } catch {
         return void 0;
       }
@@ -2578,7 +2679,7 @@ function createStore(root) {
         return [];
       return readdirSync(d).filter((n) => n.endsWith(".json")).map((n) => {
         try {
-          return JSON.parse(readFileSync5(join6(d, n), "utf-8"));
+          return JSON.parse(readFileSync4(join6(d, n), "utf-8"));
         } catch {
           return void 0;
         }
@@ -2616,7 +2717,7 @@ var init_store = __esm({
 import { homedir as homedir4 } from "os";
 import { join as join7, resolve as resolve2, sep as sep2 } from "path";
 import { randomBytes } from "crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync2, renameSync as renameSync2, writeFileSync as writeFileSync5, existsSync as existsSync7, rmSync as rmSync4, statSync as statSync2 } from "fs";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, readdirSync as readdirSync2, renameSync as renameSync2, writeFileSync as writeFileSync4, existsSync as existsSync7, rmSync as rmSync4, statSync as statSync2 } from "fs";
 function defaultWorkRoot() {
   return join7(homedir4(), ".config", "squadrant", "work");
 }
@@ -2644,10 +2745,10 @@ function createWorkStore(root = defaultWorkRoot()) {
   const itemFile = (p, id) => assertUnderRoot(join7(projDir(p), `${safeSegment2("id", id)}.json`));
   return {
     put(item) {
-      mkdirSync4(projDir(item.project), { recursive: true });
+      mkdirSync3(projDir(item.project), { recursive: true });
       const dest = itemFile(item.project, item.id);
       const tmp = `${dest}.tmp`;
-      writeFileSync5(tmp, JSON.stringify(item, null, 2));
+      writeFileSync4(tmp, JSON.stringify(item, null, 2));
       renameSync2(tmp, dest);
     },
     get(project, id) {
@@ -2655,7 +2756,7 @@ function createWorkStore(root = defaultWorkRoot()) {
       if (!existsSync7(f))
         return void 0;
       try {
-        return JSON.parse(readFileSync6(f, "utf-8"));
+        return JSON.parse(readFileSync5(f, "utf-8"));
       } catch {
         return void 0;
       }
@@ -2666,7 +2767,7 @@ function createWorkStore(root = defaultWorkRoot()) {
         return [];
       return readdirSync2(d).filter((n) => n.endsWith(".json") && !n.endsWith(".json.tmp")).map((n) => {
         try {
-          return JSON.parse(readFileSync6(join7(d, n), "utf-8"));
+          return JSON.parse(readFileSync5(join7(d, n), "utf-8"));
         } catch {
           return void 0;
         }
@@ -2810,15 +2911,15 @@ var init_snapshot = __esm({
 
 // packages/core/dist/launchd.js
 import { execFileSync as execFileSync3 } from "child_process";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6, readFileSync as readFileSync7, existsSync as existsSync8, openSync, writeSync, closeSync, unlinkSync as unlinkSync2, constants } from "fs";
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5, readFileSync as readFileSync6, existsSync as existsSync8, openSync, writeSync, closeSync, unlinkSync as unlinkSync2, constants } from "fs";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname3, join as join8 } from "path";
+import { dirname as dirname2, join as join8 } from "path";
 import { fileURLToPath } from "url";
 function plistPath() {
   return join8(homedir5(), "Library", "LaunchAgents", `${LABEL}.plist`);
 }
 function daemonEntryPath() {
-  const p = join8(dirname3(fileURLToPath(import.meta.url)), "squadrantd.js");
+  const p = join8(dirname2(fileURLToPath(import.meta.url)), "squadrantd.js");
   if (!existsSync8(p)) {
     throw new Error(`daemonEntryPath: compiled entry not found at '${p}'; run 'npm run build' \u2014 a src-tree or missing path in the launchd plist causes a MODULE_NOT_FOUND crash-loop (#259)`);
   }
@@ -2827,10 +2928,28 @@ function daemonEntryPath() {
 function xmlEscape(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function sanitizePathForPlist(path34) {
+function xmlUnescape(s) {
+  return s.replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function parseProgramArgs(plistXml) {
+  const m = plistXml.match(/<key>ProgramArguments<\/key>\s*<array><string>([^<]*)<\/string><string>([^<]*)<\/string><\/array>/);
+  if (!m)
+    return null;
+  return { nodeBin: xmlUnescape(m[1]), daemonEntry: xmlUnescape(m[2]) };
+}
+function detectForeignInstall(parsed, thisEntry, registeredEntryExists) {
+  if (!parsed)
+    return null;
+  if (parsed.daemonEntry === thisEntry)
+    return null;
+  if (!registeredEntryExists)
+    return null;
+  return { registeredEntry: parsed.daemonEntry, thisEntry };
+}
+function sanitizePathForPlist(path35) {
   const seen = /* @__PURE__ */ new Set();
   const stable = [];
-  for (const p of path34.split(":")) {
+  for (const p of path35.split(":")) {
     if (!p)
       continue;
     if (p.includes("/.claude/plugins/"))
@@ -2849,7 +2968,7 @@ function resolveAgentBinDirs() {
       const out = execFileSync3("which", [bin], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
       const resolved = out.trim();
       if (resolved)
-        dirs.push(dirname3(resolved));
+        dirs.push(dirname2(resolved));
     } catch {
     }
   }
@@ -2911,7 +3030,7 @@ function tryAcquireDaemonLock() {
   const lp = daemonLockPath();
   if (existsSync8(lp)) {
     try {
-      const pid = parseInt(readFileSync7(lp, "utf-8").trim(), 10);
+      const pid = parseInt(readFileSync6(lp, "utf-8").trim(), 10);
       if (!Number.isFinite(pid) || pid <= 0) {
         unlinkSync2(lp);
       } else {
@@ -2948,17 +3067,19 @@ function computeDaemonDrift(nodeBin) {
   const p = plistPath();
   const entry = daemonEntryPath();
   const desired = renderPlist(nodeBin, entry, buildDaemonPath(process.env.PATH ?? ""));
-  const current = existsSync8(p) ? readFileSync7(p, "utf-8") : null;
+  const current = existsSync8(p) ? readFileSync6(p, "utf-8") : null;
   const uid = process.getuid?.() ?? 0;
   const target = `gui/${uid}/${LABEL}`;
   const changed = current !== desired;
   const programChanged = current !== null && changed && !current.includes(programArgsBlock(nodeBin, entry));
-  return { plistPath: p, target, desired, current, changed, programChanged };
+  const parsedCurrent = current !== null ? parseProgramArgs(current) : null;
+  const foreignInstall = detectForeignInstall(parsedCurrent, entry, parsedCurrent !== null && existsSync8(parsedCurrent.daemonEntry));
+  return { plistPath: p, target, desired, current, changed, programChanged, foreignInstall };
 }
 function applyDaemonDrift(drift) {
   if (drift.changed) {
-    mkdirSync5(dirname3(drift.plistPath), { recursive: true });
-    writeFileSync6(drift.plistPath, drift.desired);
+    mkdirSync4(dirname2(drift.plistPath), { recursive: true });
+    writeFileSync5(drift.plistPath, drift.desired);
   }
   if (drift.programChanged) {
     try {
@@ -2994,7 +3115,12 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
     return;
   }
   try {
-    applyDaemonDrift(computeDaemonDrift(nodeBin));
+    const drift = computeDaemonDrift(nodeBin);
+    if (drift.foreignInstall) {
+      process.stderr.write(printForeignInstallError(drift.foreignInstall));
+      return;
+    }
+    applyDaemonDrift(drift);
   } catch (e) {
     process.stderr.write(`[squadrant] warn: ensureDaemon failed (${e instanceof Error ? e.message : e})
 `);
@@ -3002,6 +3128,13 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
     releaseDaemonLock();
   }
 }
+function printForeignInstallError(foreign) {
+  return `[squadrant] refusing to restart the daemon: the registered launchd config belongs to a DIFFERENT squadrant install than this one.
+  registered install: ${foreign.registeredEntry}
+  this install:        ${foreign.thisEntry}
+  Two squadrant installs on this machine will keep fighting over the daemon (#670). Uninstall the one you don't use, then run \`squadrant heal daemon\` to reconcile.
+`;
+}
 function reregisterDaemon(nodeBin = process.execPath) {
   if (!tryAcquireDaemonLock())
     return;
@@ -3165,7 +3298,7 @@ var init_gate = __esm({
 });
 
 // packages/core/dist/daemon/liveness-registry.js
-import { writeFileSync as writeFileSync7, readFileSync as readFileSync8, renameSync as renameSync3 } from "fs";
+import { writeFileSync as writeFileSync6, readFileSync as readFileSync7, renameSync as renameSync3 } from "fs";
 var LivenessRegistry;
 var init_liveness_registry = __esm({
   "packages/core/dist/daemon/liveness-registry.js"() {
@@ -3179,13 +3312,13 @@ var init_liveness_registry = __esm({
         this.path = opts.path;
         this.readFile = opts.readFile ?? ((p) => {
           try {
-            return readFileSync8(p, "utf-8");
+            return readFileSync7(p, "utf-8");
           } catch {
             return void 0;
           }
         });
         this.writeFile = opts.writeFile ?? ((p, c) => {
-          writeFileSync7(`${p}.tmp`, c);
+          writeFileSync6(`${p}.tmp`, c);
           renameSync3(`${p}.tmp`, p);
         });
       }
@@ -3238,7 +3371,7 @@ var init_liveness_registry = __esm({
 import { homedir as homedir6 } from "os";
 import { join as join9 } from "path";
 import { spawn as realSpawn } from "child_process";
-import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync6 } from "fs";
+import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync5 } from "fs";
 function defaultIsPidAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -3258,10 +3391,10 @@ function buildContext(opts) {
   const isPidAlive = opts.isPidAlive ?? defaultIsPidAlive;
   const spawn2 = opts.spawn ?? realSpawn;
   const resultsDir = join9(stateRoot, "_results");
-  mkdirSync6(resultsDir, { recursive: true });
+  mkdirSync5(resultsDir, { recursive: true });
   const writeResult = (id, payload) => {
     const p = join9(resultsDir, `${id}.txt`);
-    writeFileSync8(p, payload);
+    writeFileSync7(p, payload);
     return p;
   };
   const log = (m) => process.stderr.write(`[squadrantd] ${(/* @__PURE__ */ new Date()).toISOString()} ${m}
@@ -4007,7 +4140,7 @@ var init_server = __esm({
 // packages/core/dist/daemon/snapshot-gather.js
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { join as join10 } from "path";
-import { statSync as statSync3, openSync as openSync2, readSync, closeSync as closeSync2, readdirSync as readdirSync3, readFileSync as readFileSync9 } from "fs";
+import { statSync as statSync3, openSync as openSync2, readSync, closeSync as closeSync2, readdirSync as readdirSync3, readFileSync as readFileSync8 } from "fs";
 function distBuiltAt() {
   try {
     return statSync3(SELF_PATH).mtimeMs;
@@ -4015,10 +4148,10 @@ function distBuiltAt() {
     return 0;
   }
 }
-function gatherLogStats(path34, now, windowMs) {
+function gatherLogStats(path35, now, windowMs) {
   let sizeBytes = 0;
   try {
-    sizeBytes = statSync3(path34).size;
+    sizeBytes = statSync3(path35).size;
   } catch {
     return { errorCount: 0, sizeBytes: 0, windowMs };
   }
@@ -4029,7 +4162,7 @@ function gatherLogStats(path34, now, windowMs) {
   const len = sizeBytes - start;
   let text = "";
   try {
-    const fd = openSync2(path34, "r");
+    const fd = openSync2(path35, "r");
     try {
       const buf = Buffer.alloc(len);
       readSync(fd, buf, 0, len, start);
@@ -4070,7 +4203,7 @@ function gatherStoreStats(store, stateRoot, project) {
       if (!n.endsWith(".json"))
         continue;
       try {
-        JSON.parse(readFileSync9(join10(dir, n), "utf-8"));
+        JSON.parse(readFileSync8(join10(dir, n), "utf-8"));
       } catch {
         corruptCount++;
       }
@@ -4105,7 +4238,7 @@ var init_snapshot_gather = __esm({
 });
 
 // packages/core/dist/daemon/start.js
-import { join as join11, dirname as dirname4 } from "path";
+import { join as join11, dirname as dirname3 } from "path";
 import { readdir } from "fs/promises";
 function startDaemon(ctx, opts, pkgVersion) {
   const { stateRoot, store, log, isPidAlive, resultsDir, taskTimeoutMs, inFlightHeadlessIds, activeHeadlessKills, broadcast, cancelPromotionsFor } = ctx;
@@ -4181,7 +4314,7 @@ function startDaemon(ctx, opts, pkgVersion) {
     return out;
   }
   async function gatherSnapshotInputs(now) {
-    const logPath2 = join11(dirname4(stateRoot), "squadrantd.log");
+    const logPath2 = join11(dirname3(stateRoot), "squadrantd.log");
     const tier2Projects = opts.registeredProjects ?? Object.keys(loadConfig().projects);
     const projects = await Promise.all(tier2Projects.map(async (project) => {
       const cursor = await readCursor({ stateRoot, project, subscriber: CURSOR_SUBSCRIBER2 });
@@ -4386,35 +4519,33 @@ var init_start = __esm({
 
 // packages/core/dist/session-freshness.js
 import crypto from "crypto";
-import fs10 from "fs";
-import path8 from "path";
+import fs9 from "fs";
+import path9 from "path";
 function loadSessions(sessionsPath) {
   try {
-    return JSON.parse(fs10.readFileSync(sessionsPath, "utf-8"));
+    return JSON.parse(readConfigFileSync(sessionsPath));
   } catch {
     return { workspaces: {} };
   }
 }
 function saveSessions(sessionsPath, sessions) {
-  const dir = path8.dirname(sessionsPath);
-  fs10.mkdirSync(dir, { recursive: true });
-  fs10.writeFileSync(sessionsPath, JSON.stringify(sessions, null, 2) + "\n");
+  writeConfigFileSync(sessionsPath, JSON.stringify(sessions, null, 2) + "\n");
 }
 function computeTemplateHash(role, templatesDir) {
   const hash = crypto.createHash("sha256");
-  const roleFile = path8.join(templatesDir, `${role}.claude.md`);
-  const legacyRoleFile = path8.join(templatesDir, `${role}.CLAUDE.md`);
-  if (fs10.existsSync(roleFile)) {
-    hash.update(fs10.readFileSync(roleFile, "utf-8"));
-  } else if (fs10.existsSync(legacyRoleFile)) {
-    hash.update(fs10.readFileSync(legacyRoleFile, "utf-8"));
+  const roleFile = path9.join(templatesDir, `${role}.claude.md`);
+  const legacyRoleFile = path9.join(templatesDir, `${role}.CLAUDE.md`);
+  if (fs9.existsSync(roleFile)) {
+    hash.update(fs9.readFileSync(roleFile, "utf-8"));
+  } else if (fs9.existsSync(legacyRoleFile)) {
+    hash.update(fs9.readFileSync(legacyRoleFile, "utf-8"));
   }
-  const pluginSkillsDir = path8.join(templatesDir, "..", "plugin", "skills");
-  if (fs10.existsSync(pluginSkillsDir)) {
-    for (const skill of fs10.readdirSync(pluginSkillsDir).sort()) {
-      const skillFile = path8.join(pluginSkillsDir, skill, "SKILL.md");
-      if (fs10.existsSync(skillFile)) {
-        hash.update(fs10.readFileSync(skillFile, "utf-8"));
+  const pluginSkillsDir = path9.join(templatesDir, "..", "plugin", "skills");
+  if (fs9.existsSync(pluginSkillsDir)) {
+    for (const skill of fs9.readdirSync(pluginSkillsDir).sort()) {
+      const skillFile = path9.join(pluginSkillsDir, skill, "SKILL.md");
+      if (fs9.existsSync(skillFile)) {
+        hash.update(fs9.readFileSync(skillFile, "utf-8"));
       }
     }
   }
@@ -4446,6 +4577,7 @@ function recordSession(workspaceName, role, opts) {
 }
 var init_session_freshness = __esm({
   "packages/core/dist/session-freshness.js"() {
+    init_dist();
   }
 });
 
@@ -4835,17 +4967,16 @@ var init_format = __esm({
 });
 
 // packages/core/dist/telegram/state.js
-import fs11 from "fs";
-import path9 from "path";
+import path10 from "path";
 function statePath(stateRoot) {
-  return path9.join(stateRoot, "telegram-state.json");
+  return path10.join(stateRoot, "telegram-state.json");
 }
 function topicKey(project, scope = "project") {
   return `${project}::${scope}`;
 }
 function loadState(stateRoot) {
   try {
-    const raw = fs11.readFileSync(statePath(stateRoot), "utf-8");
+    const raw = readConfigFileSync(statePath(stateRoot));
     const data = JSON.parse(raw);
     const result = {
       offset: typeof data.offset === "number" ? data.offset : 0,
@@ -4860,8 +4991,7 @@ function loadState(stateRoot) {
   }
 }
 function saveState(stateRoot, s) {
-  fs11.mkdirSync(stateRoot, { recursive: true });
-  fs11.writeFileSync(statePath(stateRoot), JSON.stringify(s, null, 2) + "\n");
+  writeConfigFileSync(statePath(stateRoot), JSON.stringify(s, null, 2) + "\n");
 }
 function setTopic(stateRoot, project, topicId, scope = "project") {
   const s = loadState(stateRoot);
@@ -4895,6 +5025,7 @@ function findProjectByThread(stateRoot, threadId) {
 }
 var init_state = __esm({
   "packages/core/dist/telegram/state.js"() {
+    init_dist();
   }
 });
 
@@ -5046,7 +5177,7 @@ var init_tiers = __esm({
 
 // packages/core/dist/telegram/bridge.js
 import os4 from "os";
-import path10 from "path";
+import path11 from "path";
 function parseNotifyPref(text) {
   const parts = text.trim().split(/\s+/);
   if (stripBotMention(parts[0] ?? "").toLowerCase() !== "/notify")
@@ -5073,7 +5204,7 @@ function notifyToggle(text) {
 }
 function createTelegramBridge(opts) {
   const { cfg, stateRoot, client, appendCaptainMessage: appendCaptainMessage2, log, ensureCaptainAlive, runCommand, sendReply } = opts;
-  const configRoot = opts.configRoot ?? path10.join(os4.homedir(), ".config", "squadrant");
+  const configRoot = opts.configRoot ?? path11.join(os4.homedir(), ".config", "squadrant");
   const pollMs = cfg.pollMs ?? 1e3;
   let running = false;
   let lastSuccessfulPollAt = null;
@@ -5204,14 +5335,14 @@ function createTelegramBridge(opts) {
   }
   function currentEffort() {
     try {
-      return loadConfig(path10.join(configRoot, "config.json")).defaults.effort ?? "balance";
+      return loadConfig(path11.join(configRoot, "config.json")).defaults.effort ?? "balance";
     } catch {
       return "balance";
     }
   }
   function projectNames() {
     try {
-      return Object.keys(loadConfig(path10.join(configRoot, "config.json")).projects);
+      return Object.keys(loadConfig(path11.join(configRoot, "config.json")).projects);
     } catch {
       return [];
     }
@@ -5479,7 +5610,7 @@ var init_restart_daemon = __esm({
 });
 
 // packages/core/dist/telegram/setup.js
-import fs12 from "fs";
+import fs10 from "fs";
 function resolveSetupGroup(existingSupergroupId, opts) {
   if (existingSupergroupId !== void 0 && !opts.redetect)
     return "reuse";
@@ -5530,7 +5661,7 @@ function writeTelegramConfig(configPath, opts) {
   let config;
   let raw = null;
   try {
-    raw = fs12.readFileSync(configPath, "utf-8");
+    raw = fs10.readFileSync(configPath, "utf-8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       throw new Error(`refusing to overwrite unreadable config at ${configPath}: ${String(err)}`);
@@ -5558,10 +5689,11 @@ function writeTelegramConfig(configPath, opts) {
   if (remoteControl !== void 0)
     next.remoteControl = remoteControl;
   config.telegram = next;
-  fs12.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+  writeConfigFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
 }
 var init_setup = __esm({
   "packages/core/dist/telegram/setup.js"() {
+    init_dist();
     init_state();
     init_bot_commands();
     init_restart_daemon();
@@ -5887,7 +6019,7 @@ var init_launch_workspace = __esm({
 });
 
 // packages/core/dist/side-session.js
-import fs13 from "fs";
+import fs11 from "fs";
 function sideTitleFor(project, name) {
   return `\u{1F5D2} ${project}:${name}`;
 }
@@ -5989,7 +6121,7 @@ async function runSideClose(runtime, workspaceId, project, name, projPath, workt
   await runtime.closePane(pane);
   if (projPath) {
     const wtPath = worktreePath(projPath, worktreeDir, project, name);
-    if (fs13.existsSync(wtPath)) {
+    if (fs11.existsSync(wtPath)) {
       try {
         removeWorktree(projPath, wtPath);
       } catch (e) {
@@ -6009,9 +6141,9 @@ var init_side_session = __esm({
 });
 
 // packages/core/dist/crew-spawn.js
-import fs14 from "fs";
+import fs12 from "fs";
 import os5 from "os";
-import path11 from "path";
+import path12 from "path";
 async function listCrewPanes(runtime, workspaceId, project) {
   const surfaces = await runtime.listSurfaces(workspaceId);
   return surfaces.filter((s) => s.title && isCrewTitle(project, s.title));
@@ -6080,9 +6212,9 @@ async function runCrewSpawn(input, config, deps) {
   }) : proj.path;
   let firstTurnTask = input.task;
   if (input.taskFile && input.taskFile !== "-" && !input.shared) {
-    const absTaskFile = path11.resolve(input.taskFile);
-    const basename = path11.basename(absTaskFile);
-    fs14.copyFileSync(absTaskFile, path11.join(spawnCwd, basename));
+    const absTaskFile = path12.resolve(input.taskFile);
+    const basename = path12.basename(absTaskFile);
+    fs12.copyFileSync(absTaskFile, path12.join(spawnCwd, basename));
     firstTurnTask = `Read ./${basename} to get your task brief, then execute it.`;
   }
   const route = !input.agentExplicit && !input.model ? resolveCrewRoute(input.task, config) : null;
@@ -6095,8 +6227,8 @@ async function runCrewSpawn(input, config, deps) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
   if (agentName === "codex") {
-    const codexRoleFile = path11.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
-    const roleInstructions = fs14.existsSync(codexRoleFile) ? fs14.readFileSync(codexRoleFile, "utf8") : void 0;
+    const codexRoleFile = path12.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
+    const roleInstructions = fs12.existsSync(codexRoleFile) ? fs12.readFileSync(codexRoleFile, "utf8") : void 0;
     return runCodexInteractiveSpawn({
       project: input.project,
       task: input.task,
@@ -6112,7 +6244,7 @@ async function runCrewSpawn(input, config, deps) {
       sendCodexFirstTurn: deps.sendCodexFirstTurn
     });
   }
-  const promptFile = path11.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
+  const promptFile = path12.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
   const interactive = agent.name === "claude" || agent.name === "opencode";
   const crewRole = config.defaults.roles?.crew;
   const configModel = crewRole && crewRole.agent === agent.name ? crewRole.model : void 0;
@@ -6294,7 +6426,7 @@ function buildRecoveryHint(sessId, provider, worktreeCwd) {
     return "";
   if (provider === "claude") {
     const escaped = worktreeCwd.replace(/[^a-zA-Z0-9]/g, "-");
-    const transcriptPath = path11.join(os5.homedir(), ".claude", "projects", escaped, `${sessId}.jsonl`);
+    const transcriptPath = path12.join(os5.homedir(), ".claude", "projects", escaped, `${sessId}.jsonl`);
     return `
 transcript: ${transcriptPath}
 resume:     claude --resume ${sessId}   (run from the worktree path above)
@@ -6390,8 +6522,8 @@ var init_crew_spawn = __esm({
     init_crew_routing();
     init_crew_protocol();
     init_crew_lifecycle();
-    TEMPLATES_DIR = path11.join(os5.homedir(), ".config", "squadrant", "templates");
-    STATE_ROOT = path11.join(os5.homedir(), ".config", "squadrant", "state");
+    TEMPLATES_DIR = path12.join(os5.homedir(), ".config", "squadrant", "templates");
+    STATE_ROOT = path12.join(os5.homedir(), ".config", "squadrant", "state");
     CLOSE_LOOKUP_RETRIES = 3;
     CLOSE_LOOKUP_RETRY_DELAY_MS = 150;
   }
@@ -6489,6 +6621,7 @@ __export(dist_exports2, {
   deliverStartupPrompt: () => deliverStartupPrompt,
   deliverable: () => deliverable,
   deriveCaptainState: () => deriveCaptainState,
+  detectForeignInstall: () => detectForeignInstall,
   detectGroupAndUser: () => detectGroupAndUser,
   detectGroupId: () => detectGroupId,
   discoverCaptainSurface: () => discoverCaptainSurface,
@@ -6528,7 +6661,9 @@ __export(dist_exports2, {
   notifyToggle: () => notifyToggle,
   parseCommand: () => parseCommand,
   parseNotifyPref: () => parseNotifyPref,
+  parseProgramArgs: () => parseProgramArgs,
   plistPath: () => plistPath,
+  printForeignInstallError: () => printForeignInstallError,
   programArgsBlock: () => programArgsBlock,
   projectHealth: () => projectHealth,
   purgeExpiredWorkItems: () => purgeExpiredWorkItems,
@@ -7280,13 +7415,13 @@ var init_notifiers = __esm({
 });
 
 // packages/workspaces/dist/workspaces/obsidian.js
-import fs15 from "fs/promises";
+import fs13 from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
-import path12 from "path";
+import path13 from "path";
 function resolveInRoot(root, relative) {
-  const joined = path12.resolve(root, relative);
-  const normalized = path12.resolve(root) + path12.sep;
-  if (joined !== path12.resolve(root) && !joined.startsWith(normalized)) {
+  const joined = path13.resolve(root, relative);
+  const normalized = path13.resolve(root) + path13.sep;
+  if (joined !== path13.resolve(root) && !joined.startsWith(normalized)) {
     throw new Error(`Path '${relative}' escapes workspace root`);
   }
   return joined;
@@ -7305,16 +7440,16 @@ function createObsidianDriver(scope) {
       };
     },
     async read(rel) {
-      return fs15.readFile(resolveInRoot(root, rel), "utf-8");
+      return fs13.readFile(resolveInRoot(root, rel), "utf-8");
     },
     async write(rel, content) {
       const abs = resolveInRoot(root, rel);
-      await fs15.mkdir(path12.dirname(abs), { recursive: true });
-      await fs15.writeFile(abs, content);
+      await fs13.mkdir(path13.dirname(abs), { recursive: true });
+      await fs13.writeFile(abs, content);
     },
     async exists(rel) {
       try {
-        await fs15.access(resolveInRoot(root, rel));
+        await fs13.access(resolveInRoot(root, rel));
         return true;
       } catch {
         return false;
@@ -7322,13 +7457,13 @@ function createObsidianDriver(scope) {
     },
     async list(rel) {
       try {
-        return await fs15.readdir(resolveInRoot(root, rel));
+        return await fs13.readdir(resolveInRoot(root, rel));
       } catch {
         return [];
       }
     },
     async mkdir(rel) {
-      await fs15.mkdir(resolveInRoot(root, rel), { recursive: true });
+      await fs13.mkdir(resolveInRoot(root, rel), { recursive: true });
     }
   };
 }
@@ -7592,7 +7727,7 @@ var init_store_fingerprint = __esm({
 });
 
 // packages/workspaces/dist/cmux-daemon/daemon-cmux.js
-import { readdirSync as readdirSync4, readFileSync as readFileSync10 } from "fs";
+import { readdirSync as readdirSync4, readFileSync as readFileSync9 } from "fs";
 import { join as join14 } from "path";
 import { homedir as homedir9 } from "os";
 var DaemonCmux;
@@ -7665,7 +7800,7 @@ var init_daemon_cmux = __esm({
         } catch (e) {
           throw new Error(`liveness: could not read cmux state dir ${dir}: ${e.message}`);
         }
-        return readLivenessSnapshot(files, (f) => readFileSync10(join14(dir, f), "utf-8"), projects);
+        return readLivenessSnapshot(files, (f) => readFileSync9(join14(dir, f), "utf-8"), projects);
       }
     };
   }
@@ -7674,7 +7809,7 @@ var init_daemon_cmux = __esm({
 // packages/workspaces/dist/cmux-daemon/cmux-store-source.js
 import { join as join15 } from "path";
 import { homedir as homedir10 } from "os";
-import { watch, readdirSync as readdirSync5, readFileSync as readFileSync11, existsSync as existsSync11 } from "fs";
+import { watch, readdirSync as readdirSync5, readFileSync as readFileSync10, existsSync as existsSync11 } from "fs";
 function parseLifecycleState(s) {
   if (s === "running" || s === "idle" || s === "needsInput" || s === "unknown") {
     return s;
@@ -7696,9 +7831,9 @@ function defaultListFiles(dir) {
     return [];
   }
 }
-function defaultReadFile(path34) {
+function defaultReadFile(path35) {
   try {
-    return readFileSync11(path34, "utf-8");
+    return readFileSync10(path35, "utf-8");
   } catch {
     return void 0;
   }
@@ -7852,7 +7987,7 @@ var init_cmux_store_source = __esm({
 // packages/workspaces/dist/native-hooks/native-hook-source.js
 import { join as join16 } from "path";
 import { homedir as homedir11 } from "os";
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync8 } from "fs";
 function installClaudeHooks(opts = {}) {
   const settingsPath = opts.settingsPath ?? join16(homedir11(), ".claude", "settings.json");
   const hookCmd = opts.hookCmd ?? DEFAULT_HOOK_CMD;
@@ -7948,16 +8083,16 @@ function extractDetail(sub, payload) {
   }
   return void 0;
 }
-function defaultReadFile2(path34) {
+function defaultReadFile2(path35) {
   try {
-    return readFileSync12(path34, "utf-8");
+    return readFileSync11(path35, "utf-8");
   } catch {
     return void 0;
   }
 }
-function defaultWriteFile(path34, content) {
-  mkdirSync7(path34.replace(/\/[^/]+$/, ""), { recursive: true });
-  writeFileSync9(path34, content, "utf-8");
+function defaultWriteFile(path35, content) {
+  mkdirSync6(path35.replace(/\/[^/]+$/, ""), { recursive: true });
+  writeFileSync8(path35, content, "utf-8");
 }
 var CLAUDE_HOOK_EVENTS, DEFAULT_HOOK_CMD, NativeHookSource;
 var init_native_hook_source = __esm({
@@ -8576,8 +8711,8 @@ var init_registry4 = __esm({
 });
 
 // packages/agents/dist/drivers/launch-cmd.js
-import fs16 from "fs";
-import path13 from "path";
+import fs14 from "fs";
+import path14 from "path";
 function buildAgentCmd(agentName, registry, role, fresh, permissionMode, model, templatesDir) {
   const driver = registry.getDriver(agentName);
   if (driver.name === "claude") {
@@ -8593,27 +8728,27 @@ function buildAgentCmd(agentName, registry, role, fresh, permissionMode, model,
       cmd += ` --model ${model}`;
     }
     if (templatesDir) {
-      const roleFile2 = path13.join(templatesDir, `${role}.claude.md`);
-      const legacyRoleFile = path13.join(templatesDir, `${role}.CLAUDE.md`);
-      const actualRoleFile = fs16.existsSync(roleFile2) ? roleFile2 : fs16.existsSync(legacyRoleFile) ? legacyRoleFile : null;
+      const roleFile2 = path14.join(templatesDir, `${role}.claude.md`);
+      const legacyRoleFile = path14.join(templatesDir, `${role}.CLAUDE.md`);
+      const actualRoleFile = fs14.existsSync(roleFile2) ? roleFile2 : fs14.existsSync(legacyRoleFile) ? legacyRoleFile : null;
       if (actualRoleFile) {
         cmd += ` --append-system-prompt-file ${actualRoleFile}`;
       }
-      const pluginDir = path13.join(templatesDir, "..", "plugin");
-      if (fs16.existsSync(pluginDir)) {
+      const pluginDir = path14.join(templatesDir, "..", "plugin");
+      if (fs14.existsSync(pluginDir)) {
         cmd += ` --plugin-dir ${pluginDir}`;
       }
     }
     return cmd;
   }
-  const roleFile = templatesDir ? path13.join(templatesDir, `${role}.${driver.templateSuffix}.md`) : void 0;
+  const roleFile = templatesDir ? path14.join(templatesDir, `${role}.${driver.templateSuffix}.md`) : void 0;
   return driver.buildCommand({
     prompt: `You are a squadrant ${role}. Read your instructions from ${roleFile ?? role} and begin.`,
     workdir: process.cwd(),
     role,
     model,
     autoApprove: true,
-    promptFile: roleFile && fs16.existsSync(roleFile) ? roleFile : void 0
+    promptFile: roleFile && fs14.existsSync(roleFile) ? roleFile : void 0
   });
 }
 var init_launch_cmd = __esm({
@@ -8636,7 +8771,7 @@ var init_drivers = __esm({
 
 // packages/agents/dist/projection/cursor.js
 import { mkdir, readFile, writeFile } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 import os6 from "os";
 function renderMdc(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8685,7 +8820,7 @@ function createCursorEmitter() {
       if (scope === "user") {
         return [
           {
-            path: path14.join(os6.homedir(), ".cursor/rules/squadrant-global.mdc"),
+            path: path15.join(os6.homedir(), ".cursor/rules/squadrant-global.mdc"),
             shared: false,
             format: "mdc"
           }
@@ -8695,7 +8830,7 @@ function createCursorEmitter() {
         return [];
       return [
         {
-          path: path14.join(projectRoot, ".cursor/rules/squadrant.mdc"),
+          path: path15.join(projectRoot, ".cursor/rules/squadrant.mdc"),
           shared: false,
           format: "mdc"
         }
@@ -8712,7 +8847,7 @@ function createCursorEmitter() {
           diff: buildDiff(existing, generated)
         };
       }
-      await mkdir(path14.dirname(dest.path), { recursive: true });
+      await mkdir(path15.dirname(dest.path), { recursive: true });
       await writeFile(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8763,7 +8898,7 @@ var init_marker = __esm({
 
 // packages/agents/dist/projection/codex.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-import path15 from "path";
+import path16 from "path";
 import os7 from "os";
 function renderMarkdown(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8788,7 +8923,7 @@ function createCodexEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path15.join(os7.homedir(), ".codex/AGENTS.md"),
+          path: path16.join(os7.homedir(), ".codex/AGENTS.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8796,7 +8931,7 @@ function createCodexEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path15.join(projectRoot, "AGENTS.md"),
+        path: path16.join(projectRoot, "AGENTS.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8817,7 +8952,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir2(path15.dirname(dest.path), { recursive: true });
+      await mkdir2(path16.dirname(dest.path), { recursive: true });
       await writeFile2(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8835,7 +8970,7 @@ var init_codex2 = __esm({
 
 // packages/agents/dist/projection/gemini.js
 import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
-import path16 from "path";
+import path17 from "path";
 import os8 from "os";
 function renderMarkdown2(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8860,7 +8995,7 @@ function createGeminiEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path16.join(os8.homedir(), ".gemini/GEMINI.md"),
+          path: path17.join(os8.homedir(), ".gemini/GEMINI.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8868,7 +9003,7 @@ function createGeminiEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path16.join(projectRoot, "GEMINI.md"),
+        path: path17.join(projectRoot, "GEMINI.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8889,7 +9024,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir3(path16.dirname(dest.path), { recursive: true });
+      await mkdir3(path17.dirname(dest.path), { recursive: true });
       await writeFile3(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8907,7 +9042,7 @@ var init_gemini2 = __esm({
 
 // packages/agents/dist/projection/opencode.js
 import { mkdir as mkdir4, readFile as readFile4, writeFile as writeFile4 } from "fs/promises";
-import path17 from "path";
+import path18 from "path";
 import os9 from "os";
 function renderMarkdown3(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8932,7 +9067,7 @@ function createOpencodeEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path17.join(os9.homedir(), ".config", "opencode", "AGENTS.md"),
+          path: path18.join(os9.homedir(), ".config", "opencode", "AGENTS.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8940,7 +9075,7 @@ function createOpencodeEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path17.join(projectRoot, "AGENTS.md"),
+        path: path18.join(projectRoot, "AGENTS.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8961,7 +9096,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir4(path17.dirname(dest.path), { recursive: true });
+      await mkdir4(path18.dirname(dest.path), { recursive: true });
       await writeFile4(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -9820,7 +9955,7 @@ var init_sse_bridge = __esm({
 
 // packages/agents/dist/interactive/claude.js
 import { execSync as execSync7 } from "child_process";
-import { readFileSync as readFileSync13 } from "fs";
+import { readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join19 } from "path";
 function probeClaudeSettingsFlag() {
@@ -9884,7 +10019,7 @@ function deriveTranscriptPath(sessionId, cwd) {
 }
 function readLastAssistantText(transcriptPath) {
   try {
-    const raw = readFileSync13(transcriptPath, "utf-8");
+    const raw = readFileSync12(transcriptPath, "utf-8");
     const lines = raw.split(/\r?\n/);
     for (let i = lines.length - 1; i >= 0; i--) {
       const line = lines[i].trim();
@@ -9926,8 +10061,8 @@ function resolveLastAssistantText(payload) {
   const derived = deriveTranscriptPath(p?.session_id, cwd);
   if (derived)
     candidates.push(derived);
-  for (const path34 of candidates) {
-    const text = readLastAssistantText(path34);
+  for (const path35 of candidates) {
+    const text = readLastAssistantText(path35);
     if (text != null)
       return text;
   }
@@ -10454,9 +10589,9 @@ async function runRuntimeSend(arg1, arg2, opts, confirmOpts) {
   const resolved = resolveTarget(registry, config, target, !!opts.command);
   await needRef(resolved);
   const finalProject = opts.command ? config.commandName : target;
-  const { join: join31, dirname: dirname10 } = await import("path");
+  const { join: join31, dirname: dirname9 } = await import("path");
   const { DEFAULT_CONFIG_PATH: DEFAULT_CONFIG_PATH2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
-  const stateRoot = join31(dirname10(DEFAULT_CONFIG_PATH2), "state");
+  const stateRoot = join31(dirname9(DEFAULT_CONFIG_PATH2), "state");
   const seq = await appendCaptainMessage2({
     stateRoot,
     project: finalProject,
@@ -10562,9 +10697,9 @@ var init_runtime2 = __esm({
 init_dist();
 init_dist2();
 import { Command as Command35 } from "commander";
-import { readFileSync as readFileSync16, existsSync as existsSync13, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync15 } from "fs";
 import { fileURLToPath as fileURLToPath6 } from "url";
-import { dirname as dirname9, join as join30 } from "path";
+import { dirname as dirname8, join as join30 } from "path";
 import { homedir as homedir22 } from "os";
 
 // packages/cli/src/commands/doctor.ts
@@ -10574,9 +10709,9 @@ init_dist();
 init_dist3();
 import { Command } from "commander";
 import { execSync as execSync8 } from "child_process";
-import fs17 from "fs";
+import fs15 from "fs";
 import { stat } from "fs/promises";
-import path18 from "path";
+import path19 from "path";
 import chalk3 from "chalk";
 
 // packages/cli/src/commands/health-view.ts
@@ -10679,7 +10814,7 @@ function settingsHaveAgentTeams() {
   try {
     const home = process.env.HOME || "";
     const settings = JSON.parse(
-      fs17.readFileSync(`${home}/.claude/settings.json`, "utf-8")
+      fs15.readFileSync(`${home}/.claude/settings.json`, "utf-8")
     );
     return settings?.env?.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS === "1";
   } catch {
@@ -10690,7 +10825,7 @@ function pluginInstalled(pluginKey) {
   try {
     const home = process.env.HOME || "";
     const plugins = JSON.parse(
-      fs17.readFileSync(
+      fs15.readFileSync(
         `${home}/.claude/plugins/installed_plugins.json`,
         "utf-8"
       )
@@ -10712,6 +10847,43 @@ function tryGetVersion(cmd) {
     return "";
   }
 }
+function candidateGlobalInstalls(roots) {
+  const out = [];
+  if (roots.npm) out.push({ manager: "npm", packageJsonPath: path19.join(roots.npm, "squadrant", "package.json") });
+  if (roots.pnpm) out.push({ manager: "pnpm", packageJsonPath: path19.join(roots.pnpm, "squadrant", "package.json") });
+  if (roots.yarn) out.push({ manager: "yarn", packageJsonPath: path19.join(roots.yarn, "node_modules", "squadrant", "package.json") });
+  return out;
+}
+function findInstalledSquadrants(candidates, readVersion) {
+  const out = [];
+  for (const c of candidates) {
+    const version = readVersion(c.packageJsonPath);
+    if (version) out.push({ manager: c.manager, packageJsonPath: c.packageJsonPath, version });
+  }
+  return out;
+}
+function formatDuplicateInstallWarning(installs) {
+  if (installs.length <= 1) return null;
+  const lines = installs.map((i) => `    ${i.manager}: ${i.packageJsonPath} (v${i.version})`);
+  return `Multiple squadrant installs detected:
+${lines.join("\n")}
+    Two installs fight over the daemon plist (#670) \u2014 uninstall the one you don't use, then run \`squadrant heal daemon\`.`;
+}
+function readPackageVersion(packageJsonPath) {
+  try {
+    const pkg2 = JSON.parse(fs15.readFileSync(packageJsonPath, "utf-8"));
+    return typeof pkg2.version === "string" ? pkg2.version : null;
+  } catch {
+    return null;
+  }
+}
+function tryGetGlobalRoot(cmd, args) {
+  try {
+    return execSync8(`${cmd} ${args.join(" ")}`, { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }).trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
 function check(label, pass, hint) {
   const icon = pass ? chalk3.green("\u2714 PASS") : chalk3.red("\u2718 FAIL");
   console.log(`  ${icon}  ${label}`);
@@ -10735,7 +10907,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
   ));
   results.push(check(
     "Obsidian installed",
-    commandExists("obsidian") || fs17.existsSync("/Applications/Obsidian.app"),
+    commandExists("obsidian") || fs15.existsSync("/Applications/Obsidian.app"),
     "Install from: https://obsidian.md"
   ));
   results.push(check(
@@ -10829,7 +11001,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
     const emitter = projectionRegistry.get(name);
     const [userDest] = emitter.destinations("user");
     if (!userDest) continue;
-    const dir = path18.dirname(userDest.path);
+    const dir = path19.dirname(userDest.path);
     let status;
     try {
       await stat(dir);
@@ -10842,7 +11014,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
   results.push(
     check(
       "Squadrant config exists",
-      fs17.existsSync(
+      fs15.existsSync(
         process.env.SQUADRANT_CONFIG || `${process.env.HOME}/.config/squadrant/config.json`
       ),
       "Run: squadrant init"
@@ -10855,6 +11027,16 @@ var doctorCommand = new Command("doctor").description("Check system health and p
 ${passed === total ? chalk3.green("All checks passed") : chalk3.yellow(`${passed}/${total} checks passed`)}
 `
   );
+  const installCandidates = candidateGlobalInstalls({
+    npm: tryGetGlobalRoot("npm", ["root", "-g"]),
+    pnpm: tryGetGlobalRoot("pnpm", ["root", "-g"]),
+    yarn: tryGetGlobalRoot("yarn", ["global", "dir"])
+  });
+  const duplicateWarning = formatDuplicateInstallWarning(findInstalledSquadrants(installCandidates, readPackageVersion));
+  if (duplicateWarning) {
+    console.log(`
+${chalk3.yellow("\u26A0 WARN")}  ${duplicateWarning}`);
+  }
   printServiceHealth(await queryHealth());
   console.log(chalk3.bold("\nTool Version Compat\n"));
   const toolVersionMap = {
@@ -10916,16 +11098,16 @@ init_dist();
 init_dist3();
 init_dist();
 import { Command as Command2 } from "commander";
-import fs18 from "fs";
-import path19 from "path";
+import fs16 from "fs";
+import path20 from "path";
 import os10 from "os";
 import readline from "readline";
 import chalk4 from "chalk";
 
 // packages/cli/src/lib/per-crew-settings.ts
 init_dist4();
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync14, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname5, join as join20 } from "path";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname4, join as join20 } from "path";
 import { homedir as homedir15 } from "os";
 var CREW_PERMISSION_ALLOWLIST = [
   // git — read + safe mutations (reset/clean/config intentionally excluded)
@@ -11018,28 +11200,28 @@ function mergeCrewPermissions(settings) {
 }
 function writePerCrewSettingsLocal(o) {
   const dir = join20(o.projectCwd, ".claude");
-  mkdirSync8(dir, { recursive: true });
+  mkdirSync7(dir, { recursive: true });
   const file = join20(dir, "settings.local.json");
   let existing = {};
   try {
-    const raw = healStaleCockpitRefs(readFileSync14(file, "utf-8"));
+    const raw = healStaleCockpitRefs(readFileSync13(file, "utf-8"));
     existing = JSON.parse(raw);
   } catch {
   }
   const withHooks = mergeClaudeHooks(existing, o.hookCmd ?? "squadrant crew _hook");
   const merged = mergeCrewPermissions(withHooks);
-  writeFileSync10(file, JSON.stringify(merged, null, 2));
+  writeFileSync9(file, JSON.stringify(merged, null, 2));
   return file;
 }
 var DEFAULT_GLOBAL_OPENCODE_CONFIG_PATH = join20(homedir15(), ".config", "opencode", "opencode.json");
 function ensureGlobalOpencodeConfig(configPath = DEFAULT_GLOBAL_OPENCODE_CONFIG_PATH) {
-  mkdirSync8(dirname5(configPath), { recursive: true });
+  mkdirSync7(dirname4(configPath), { recursive: true });
   const defaultConfig = {
     $schema: "https://opencode.ai/config.json",
     model: "anthropic/claude-sonnet-4-5"
   };
   try {
-    writeFileSync10(configPath, JSON.stringify(defaultConfig, null, 2) + "\n", { flag: "wx" });
+    writeFileSync9(configPath, JSON.stringify(defaultConfig, null, 2) + "\n", { flag: "wx" });
     return configPath;
   } catch (err) {
     if (err.code === "EEXIST") return null;
@@ -11048,7 +11230,7 @@ function ensureGlobalOpencodeConfig(configPath = DEFAULT_GLOBAL_OPENCODE_CONFIG_
 }
 function writePerCrewOpencodeConfig(o) {
   const dir = join20(o.stateRoot, o.project, o.taskId);
-  mkdirSync8(dir, { recursive: true });
+  mkdirSync7(dir, { recursive: true });
   const file = join20(dir, "opencode.json");
   const config = {
     permission: {
@@ -11064,29 +11246,29 @@ function writePerCrewOpencodeConfig(o) {
       external_directory: { "**": "allow" }
     }
   };
-  writeFileSync10(file, JSON.stringify(config, null, 2));
+  writeFileSync9(file, JSON.stringify(config, null, 2));
   return file;
 }
 
 // packages/cli/src/commands/init.ts
 init_dist4();
 function findPackageRoot() {
-  let dir = path19.dirname(new URL(import.meta.url).pathname);
+  let dir = path20.dirname(new URL(import.meta.url).pathname);
   while (dir !== "/") {
-    if (fs18.existsSync(path19.join(dir, "package.json"))) return dir;
-    dir = path19.dirname(dir);
+    if (fs16.existsSync(path20.join(dir, "package.json"))) return dir;
+    dir = path20.dirname(dir);
   }
   return process.cwd();
 }
 function copyDirRecursive(src, dest) {
-  fs18.mkdirSync(dest, { recursive: true });
-  for (const entry of fs18.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path19.join(src, entry.name);
-    const destPath = path19.join(dest, entry.name);
+  fs16.mkdirSync(dest, { recursive: true });
+  for (const entry of fs16.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path20.join(src, entry.name);
+    const destPath = path20.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirRecursive(srcPath, destPath);
     } else {
-      fs18.copyFileSync(srcPath, destPath);
+      fs16.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -11106,7 +11288,7 @@ function promptLine(question) {
 var initCommand = new Command2("init").description("Guided first-time setup: hub vault, agents, plugins, projects (re-run-safe)").option("--hub <path>", "Hub vault path", "~/squadrant-hub").action(async (opts) => {
   const hubPath = resolveHome(opts.hub);
   const pkgRoot = findPackageRoot();
-  const configDir = path19.join(os10.homedir(), ".config", "squadrant");
+  const configDir = path20.join(os10.homedir(), ".config", "squadrant");
   const isTTY = process.stdin.isTTY === true;
   console.log(chalk4.bold("\nSquadrant Init\n"));
   if (!isTTY) {
@@ -11132,8 +11314,8 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
   }
   const wsRegistry = new WorkspaceRegistry({ obsidian: createObsidianDriver });
   try {
-    if (fs18.existsSync(DEFAULT_CONFIG_PATH)) {
-      const existing = JSON.parse(fs18.readFileSync(DEFAULT_CONFIG_PATH, "utf-8"));
+    if (fs16.existsSync(DEFAULT_CONFIG_PATH)) {
+      const existing = JSON.parse(fs16.readFileSync(DEFAULT_CONFIG_PATH, "utf-8"));
       wsRegistry.get(existing.workspace ?? "obsidian");
     }
   } catch (err) {
@@ -11141,7 +11323,7 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     return;
   }
   stepHeader(1, 5, "Hub vault");
-  if (fs18.existsSync(DEFAULT_CONFIG_PATH)) {
+  if (fs16.existsSync(DEFAULT_CONFIG_PATH)) {
     console.log(chalk4.yellow("    \u26A0 Config already exists, skipping creation"));
   } else {
     const config = getDefaultConfig();
@@ -11149,37 +11331,37 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     saveConfig(config);
     console.log(chalk4.green(`    \u2714 Config created at ${DEFAULT_CONFIG_PATH}`));
   }
-  const hubTemplate = path19.join(pkgRoot, "obsidian", "hub");
-  if (fs18.existsSync(hubPath)) {
+  const hubTemplate = path20.join(pkgRoot, "obsidian", "hub");
+  if (fs16.existsSync(hubPath)) {
     console.log(chalk4.yellow(`    \u26A0 Hub vault already exists at ${hubPath}`));
-  } else if (fs18.existsSync(hubTemplate)) {
+  } else if (fs16.existsSync(hubTemplate)) {
     copyDirRecursive(hubTemplate, hubPath);
     console.log(chalk4.green(`    \u2714 Hub vault scaffolded at ${hubPath}`));
   } else {
-    fs18.mkdirSync(hubPath, { recursive: true });
+    fs16.mkdirSync(hubPath, { recursive: true });
     console.log(chalk4.yellow(`    \u26A0 Hub template not found; created empty directory at ${hubPath}`));
   }
-  const hubDashboardSrc = path19.join(pkgRoot, "obsidian", "hub", "dashboard.md");
-  const hubDashboardDest = path19.join(hubPath, "dashboard.md");
-  if (fs18.existsSync(hubDashboardSrc)) {
-    fs18.copyFileSync(hubDashboardSrc, hubDashboardDest);
+  const hubDashboardSrc = path20.join(pkgRoot, "obsidian", "hub", "dashboard.md");
+  const hubDashboardDest = path20.join(hubPath, "dashboard.md");
+  if (fs16.existsSync(hubDashboardSrc)) {
+    fs16.copyFileSync(hubDashboardSrc, hubDashboardDest);
     console.log(chalk4.green(`    \u2714 Dashboard refreshed`));
   }
-  fs18.mkdirSync(path19.join(hubPath, "projects"), { recursive: true });
+  fs16.mkdirSync(path20.join(hubPath, "projects"), { recursive: true });
   ensureRuntimeSynced({ sourceRoot: pkgRoot, runtimeRoot: configDir });
   console.log(chalk4.green(`    \u2714 Runtime assets synced to ${configDir}`));
   stepHeader(2, 5, "Agent + projection setup");
-  const settingsPath = path19.join(os10.homedir(), ".claude", "settings.json");
+  const settingsPath = path20.join(os10.homedir(), ".claude", "settings.json");
   try {
     let settings = {};
-    if (fs18.existsSync(settingsPath)) {
-      settings = JSON.parse(fs18.readFileSync(settingsPath, "utf-8"));
+    if (fs16.existsSync(settingsPath)) {
+      settings = JSON.parse(fs16.readFileSync(settingsPath, "utf-8"));
     }
     const env = settings.env || {};
     if (env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS !== "1") {
       settings.env = { ...env, CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: "1" };
-      fs18.mkdirSync(path19.dirname(settingsPath), { recursive: true });
-      fs18.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+      fs16.mkdirSync(path20.dirname(settingsPath), { recursive: true });
+      fs16.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
       console.log(chalk4.green("    \u2714 Agent Teams enabled in ~/.claude/settings.json"));
     } else {
       console.log(chalk4.green("    \u2714 Agent Teams already enabled"));
@@ -11231,7 +11413,7 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     chalk4.cyan("    Absolute path to your first project (Enter to skip): ")
   );
   if (projectPath) {
-    const projectName = path19.basename(projectPath);
+    const projectName = path20.basename(projectPath);
     console.log(chalk4.bold(`
     Run this to register it:`));
     console.log(chalk4.cyan(`      squadrant projects add ${projectName} ${projectPath}
@@ -11259,8 +11441,8 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
 init_dist();
 init_dist2();
 import { Command as Command3 } from "commander";
-import fs19 from "fs";
-import path20 from "path";
+import fs17 from "fs";
+import path21 from "path";
 import chalk5 from "chalk";
 function restartAfterProjectsAdd(opts) {
   const doRestart = opts.doRestart ?? restartDaemonIfRunning;
@@ -11272,22 +11454,22 @@ function restartAfterProjectsAdd(opts) {
   }
 }
 function findPackageRoot2() {
-  let dir = path20.dirname(new URL(import.meta.url).pathname);
+  let dir = path21.dirname(new URL(import.meta.url).pathname);
   while (dir !== "/") {
-    if (fs19.existsSync(path20.join(dir, "package.json"))) return dir;
-    dir = path20.dirname(dir);
+    if (fs17.existsSync(path21.join(dir, "package.json"))) return dir;
+    dir = path21.dirname(dir);
   }
   return process.cwd();
 }
 function copyDirRecursive2(src, dest) {
-  fs19.mkdirSync(dest, { recursive: true });
-  for (const entry of fs19.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path20.join(src, entry.name);
-    const destPath = path20.join(dest, entry.name);
+  fs17.mkdirSync(dest, { recursive: true });
+  for (const entry of fs17.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path21.join(src, entry.name);
+    const destPath = path21.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirRecursive2(srcPath, destPath);
     } else {
-      fs19.copyFileSync(srcPath, destPath);
+      fs17.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -11323,7 +11505,7 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
     process.exit(1);
   }
   const resolvedPath = resolveHome(projectPath);
-  if (!fs19.existsSync(path20.join(resolvedPath, ".git"))) {
+  if (!fs17.existsSync(path21.join(resolvedPath, ".git"))) {
     console.log(chalk5.yellow(`
   \u26A0 No .git found at ${resolvedPath}. Make sure this is the project root, not a parent directory.
 `));
@@ -11376,7 +11558,7 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
   \u26A0 Group '${group}' already has '${primary[0]}' as primary. Overriding.`));
     }
   }
-  const spokeVault = opts.spoke ? resolveHome(opts.spoke) : path20.join(config.hubVault, "spokes", name);
+  const spokeVault = opts.spoke ? resolveHome(opts.spoke) : path21.join(config.hubVault, "spokes", name);
   const project = {
     path: resolvedPath,
     captainName,
@@ -11391,20 +11573,20 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
   \u2714 Project '${name}' registered`));
   restartAfterProjectsAdd({ noRestart: opts.restart === false });
   const pkgRoot = findPackageRoot2();
-  const spokeTemplate = path20.join(pkgRoot, "obsidian", "spoke");
-  if (fs19.existsSync(spokeVault)) {
+  const spokeTemplate = path21.join(pkgRoot, "obsidian", "spoke");
+  if (fs17.existsSync(spokeVault)) {
     console.log(chalk5.yellow(`  \u26A0 Spoke vault already exists at ${spokeVault}, skipping scaffold`));
-  } else if (fs19.existsSync(spokeTemplate)) {
+  } else if (fs17.existsSync(spokeTemplate)) {
     copyDirRecursive2(spokeTemplate, spokeVault);
-    const statusPath = path20.join(spokeVault, "status.md");
-    if (fs19.existsSync(statusPath)) {
-      const content = fs19.readFileSync(statusPath, "utf-8");
+    const statusPath = path21.join(spokeVault, "status.md");
+    if (fs17.existsSync(statusPath)) {
+      const content = fs17.readFileSync(statusPath, "utf-8");
       const updated = content.replace(/^project: unnamed/m, `project: ${name}`);
-      fs19.writeFileSync(statusPath, updated);
+      fs17.writeFileSync(statusPath, updated);
     }
     console.log(chalk5.green(`  \u2714 Spoke vault scaffolded at ${spokeVault}`));
   } else {
-    fs19.mkdirSync(spokeVault, { recursive: true });
+    fs17.mkdirSync(spokeVault, { recursive: true });
     console.log(chalk5.yellow(`  \u26A0 Spoke template not found; created empty dir at ${spokeVault}`));
   }
   console.log("");
@@ -11473,10 +11655,10 @@ init_dist4();
 init_dist();
 import { Command as Command5 } from "commander";
 import { execSync as execSync9 } from "child_process";
-import path21 from "path";
+import path22 from "path";
 import os11 from "os";
 import chalk7 from "chalk";
-var TEMPLATES_DIR2 = path21.join(os11.homedir(), ".config", "squadrant", "templates");
+var TEMPLATES_DIR2 = path22.join(os11.homedir(), ".config", "squadrant", "templates");
 var TASK_PROMPTS = {
   briefing: "Run your daily briefing using the squadrant:command-ops skill. Read all spoke handoffs, yesterday's logs, current status; produce a concise cross-project briefing; save to {hubVault}/daily-logs/YYYY-MM-DD.md; then exit.",
   "learnings-review": "Run a learnings review using the squadrant:command-ops skill. Scan {spokeVault}/learnings across all projects, identify cross-project patterns, propose captured-skill or fix actions, and exit when done.",
@@ -11509,7 +11691,7 @@ async function runCommandSpawn(input) {
   if (!agent) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
-  const promptFile = path21.join(TEMPLATES_DIR2, `command.${agent.templateSuffix}.md`);
+  const promptFile = path22.join(TEMPLATES_DIR2, `command.${agent.templateSuffix}.md`);
   const cliCommand = agent.buildCommand({
     prompt,
     workdir: process.cwd(),
@@ -11551,7 +11733,7 @@ import { randomUUID as randomUUID4 } from "crypto";
 import { execFileSync as execFileSync6 } from "child_process";
 import { homedir as homedir18 } from "os";
 import { join as join23 } from "path";
-import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync11 } from "fs";
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
 
 // packages/cli/src/commands/crew-output.ts
 function tailLines(text, maxLines = 40, maxBytes = 4096) {
@@ -12010,9 +12192,9 @@ function buildSignalRequest(signal, o) {
 }
 function defaultWriteResult(id, payload) {
   const dir = join23(homedir18(), ".config", "squadrant", "state", "_results");
-  mkdirSync9(dir, { recursive: true });
+  mkdirSync8(dir, { recursive: true });
   const file = join23(dir, `${id}.txt`);
-  writeFileSync11(file, payload);
+  writeFileSync10(file, payload);
   return file;
 }
 async function runCrewSignal(signal, o, deps) {
@@ -12628,11 +12810,11 @@ init_dist3();
 init_dist();
 init_dist2();
 import { Command as Command12 } from "commander";
-import fs20 from "fs";
-import path22 from "path";
+import fs18 from "fs";
+import path23 from "path";
 import os12 from "os";
 import chalk12 from "chalk";
-var TEMPLATES_DIR3 = path22.join(os12.homedir(), ".config", "squadrant", "templates");
+var TEMPLATES_DIR3 = path23.join(os12.homedir(), ".config", "squadrant", "templates");
 async function runSideSpawn2(input) {
   const config = loadConfig();
   const proj = config.projects[input.project];
@@ -12656,7 +12838,7 @@ async function runSideSpawn2(input) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
   const sideModel = sideRole?.model;
-  const promptFile = path22.join(
+  const promptFile = path23.join(
     TEMPLATES_DIR3,
     `side.${input.role}.${agent.templateSuffix}.md`
   );
@@ -12664,7 +12846,7 @@ async function runSideSpawn2(input) {
     prompt: input.topic,
     workdir: spawnCwd,
     role: "side",
-    promptFile: fs20.existsSync(promptFile) ? promptFile : void 0,
+    promptFile: fs18.existsSync(promptFile) ? promptFile : void 0,
     interactive: true,
     permissionMode: config.defaults.permissions?.crew ?? "auto",
     ...sideModel ? { model: sideModel } : {}
@@ -12928,8 +13110,8 @@ function renderDashboard(rows, opts) {
 
 // packages/web/dist/sync-hub.js
 init_dist();
-import fs21 from "fs";
-import path23 from "path";
+import fs19 from "fs";
+import path24 from "path";
 function buildMirrorMarkdown(s) {
   const fenced = "```";
   return [
@@ -12955,15 +13137,15 @@ function buildMirrorMarkdown(s) {
 function syncHub(deps) {
   if (!deps.config.hubVault)
     return [];
-  const writeFile5 = deps.writeFile ?? ((p, c) => fs21.writeFileSync(p, c));
-  const mkdir5 = deps.mkdir ?? ((p) => fs21.mkdirSync(p, { recursive: true }));
-  const projectsDir = path23.join(resolveHome(deps.config.hubVault), "projects");
+  const writeFile5 = deps.writeFile ?? ((p, c) => fs19.writeFileSync(p, c));
+  const mkdir5 = deps.mkdir ?? ((p) => fs19.mkdirSync(p, { recursive: true }));
+  const projectsDir = path24.join(resolveHome(deps.config.hubVault), "projects");
   mkdir5(projectsDir);
   const out = [];
   for (const s of deps.statuses) {
     if (s.state === "unknown")
       continue;
-    const hubPath = path23.join(projectsDir, `${s.project}.md`);
+    const hubPath = path24.join(projectsDir, `${s.project}.md`);
     try {
       writeFile5(hubPath, buildMirrorMarkdown(s));
       out.push({ project: s.project, hubPath });
@@ -12987,7 +13169,7 @@ init_dist();
 init_dist();
 import { join as join24 } from "path";
 import { homedir as homedir19 } from "os";
-import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync14 } from "fs";
 import { execFile as execFile4 } from "child_process";
 var DEFAULT_TIMEOUT_MS = 2e3;
 var AGENT_CLIS = ["claude", "codex", "gemini", "opencode"];
@@ -13097,7 +13279,7 @@ function onPath(cli) {
   return dirs.some((d) => existsSync12(join24(d, cli)));
 }
 function readSessionsHashes() {
-  const raw = JSON.parse(readFileSync15(SESSIONS_PATH, "utf-8"));
+  const raw = JSON.parse(readFileSync14(SESSIONS_PATH, "utf-8"));
   const hashes = Object.values(raw.workspaces ?? {}).map((w) => w.templateHash).filter((h) => typeof h === "string" && h.length > 0);
   return [...new Set(hashes)];
 }
@@ -14088,8 +14270,8 @@ init_dist3();
 init_dist2();
 import { Command as Command14 } from "commander";
 import { execSync as execSync11 } from "child_process";
-import fs22 from "fs";
-import path24 from "path";
+import fs20 from "fs";
+import path25 from "path";
 import os13 from "os";
 import chalk15 from "chalk";
 
@@ -14168,8 +14350,8 @@ async function selectCaptainsInteractive(entries, yesterday = getYesterday()) {
 // packages/cli/src/commands/launch.ts
 init_dist2();
 var CMUX_APP = "/Applications/cmux.app";
-var TEMPLATES_DIR4 = path24.join(os13.homedir(), ".config", "squadrant", "templates");
-var SESSIONS_PATH2 = path24.join(os13.homedir(), ".config", "squadrant", "sessions.json");
+var TEMPLATES_DIR4 = path25.join(os13.homedir(), ".config", "squadrant", "templates");
+var SESSIONS_PATH2 = path25.join(os13.homedir(), ".config", "squadrant", "sessions.json");
 function ensureCmuxReady(headless) {
   if (headless || isInsideCmux()) return;
   console.log(chalk15.yellow("\n  Not running inside cmux. Opening cmux app...\n"));
@@ -14241,12 +14423,12 @@ var launchCommand = new Command14("launch").description(
   }
   if (opts.all) {
     const hubPath = resolveHome(config.hubVault);
-    fs22.mkdirSync(hubPath, { recursive: true });
+    fs20.mkdirSync(hubPath, { recursive: true });
     console.log(chalk15.bold("\nLaunching all captain workspaces\n"));
     for (const [name, proj] of Object.entries(config.projects)) {
       const projPath = resolveHome(proj.path);
       const spokePath = resolveHome(proj.spokeVault);
-      if (!fs22.existsSync(spokePath)) {
+      if (!fs20.existsSync(spokePath)) {
         const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(name, config);
         await ensureSpokeLayout(spokeDriver);
         console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
@@ -14284,7 +14466,7 @@ Launching ${selected.length} captain workspace(s) in parallel
       const proj = config.projects[name];
       const projPath = resolveHome(proj.path);
       const spokePath = resolveHome(proj.spokeVault);
-      if (!fs22.existsSync(spokePath)) {
+      if (!fs20.existsSync(spokePath)) {
         const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(name, config);
         await ensureSpokeLayout(spokeDriver);
         console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
@@ -14308,7 +14490,7 @@ Launching ${selected.length} captain workspace(s) in parallel
     const proj = config.projects[project];
     const projPath = resolveHome(proj.path);
     const spokePath = resolveHome(proj.spokeVault);
-    if (!fs22.existsSync(spokePath)) {
+    if (!fs20.existsSync(spokePath)) {
       const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(project, config);
       await ensureSpokeLayout(spokeDriver);
       console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
@@ -14444,24 +14626,24 @@ Shutting down captain workspace for '${project}'...
 // packages/cli/src/commands/feedback.ts
 init_dist();
 import { Command as Command16 } from "commander";
-import fs23 from "fs";
+import fs21 from "fs";
 import os14 from "os";
-import path25 from "path";
+import path26 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { execSync as execSync12 } from "child_process";
 import chalk17 from "chalk";
 var REPO_URL = "https://github.com/tu11aa/squadrant";
 function readPkgVersion() {
   try {
-    const pkgPath = path25.join(path25.dirname(fileURLToPath3(import.meta.url)), "..", "package.json");
-    return JSON.parse(fs23.readFileSync(pkgPath, "utf-8")).version ?? "unknown";
+    const pkgPath = path26.join(path26.dirname(fileURLToPath3(import.meta.url)), "..", "package.json");
+    return JSON.parse(fs21.readFileSync(pkgPath, "utf-8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
 }
 function readMetrics(metricsPath) {
   try {
-    return JSON.parse(fs23.readFileSync(metricsPath, "utf-8"));
+    return JSON.parse(fs21.readFileSync(metricsPath, "utf-8"));
   } catch {
     return {};
   }
@@ -14499,7 +14681,7 @@ function buildIssueUrl(metrics, squadrantVersion) {
 }
 var feedbackCommand = new Command16("feedback").description("Open a pre-filled GitHub issue for feedback or bug reports").action(() => {
   const config = loadConfig();
-  const metricsPath = config.metrics?.path || path25.join(os14.homedir(), ".config", "squadrant", "metrics.json");
+  const metricsPath = config.metrics?.path || path26.join(os14.homedir(), ".config", "squadrant", "metrics.json");
   const metrics = readMetrics(metricsPath);
   const version = readStamp(config) ?? readPkgVersion();
   const issueUrl = buildIssueUrl(metrics, version);
@@ -14799,9 +14981,9 @@ workspaceCommand.command("read").description("Print the contents of a scope-rela
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const content = await driver.read(path34);
+    const content = await driver.read(path35);
     process.stdout.write(content);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14813,26 +14995,26 @@ workspaceCommand.command("write").description("Write content to a scope-relative
   const registry = buildRegistry2();
   try {
     let projectTarget;
-    let path34;
+    let path35;
     let rawContent;
     if (opts.hub) {
       if (arg3 !== void 0) {
         throw new Error("With --hub, pass only the path and content");
       }
       projectTarget = void 0;
-      path34 = arg1;
+      path35 = arg1;
       rawContent = arg2;
     } else {
       if (arg3 === void 0) {
         throw new Error("Missing content \u2014 usage: <project> <path> <content>");
       }
       projectTarget = arg1;
-      path34 = arg2;
+      path35 = arg2;
       rawContent = arg3;
     }
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
     const payload = rawContent === "-" ? await readStdin() : rawContent;
-    await driver.write(path34, payload);
+    await driver.write(path35, payload);
   } catch (err) {
     console.error(chalk20.red(err.message));
     process.exit(1);
@@ -14842,9 +15024,9 @@ workspaceCommand.command("list").description("List entries in a scope-relative d
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const entries = await driver.list(path34);
+    const entries = await driver.list(path35);
     for (const entry of entries) console.log(entry);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14855,9 +15037,9 @@ workspaceCommand.command("exists").description("Exit 0 if path exists, 1 if not"
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const ok2 = await driver.exists(path34);
+    const ok2 = await driver.exists(path35);
     process.exit(ok2 ? 0 : 1);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14868,9 +15050,9 @@ workspaceCommand.command("mkdir").description("Recursively create a scope-relati
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    await driver.mkdir(path34);
+    await driver.mkdir(path35);
   } catch (err) {
     console.error(chalk20.red(err.message));
     process.exit(1);
@@ -14909,8 +15091,8 @@ init_dist3();
 init_dist();
 import { Command as Command21 } from "commander";
 import chalk22 from "chalk";
-import fs24 from "fs";
-import path26 from "path";
+import fs22 from "fs";
+import path27 from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function parseScope(v) {
   if (v !== "user" && v !== "project") {
@@ -14919,10 +15101,10 @@ function parseScope(v) {
   return v;
 }
 function findPackageRoot3() {
-  let dir = path26.dirname(fileURLToPath4(import.meta.url));
+  let dir = path27.dirname(fileURLToPath4(import.meta.url));
   while (dir !== "/" && dir !== "") {
-    if (fs24.existsSync(path26.join(dir, "package.json"))) return dir;
-    dir = path26.dirname(dir);
+    if (fs22.existsSync(path27.join(dir, "package.json"))) return dir;
+    dir = path27.dirname(dir);
   }
   return process.cwd();
 }
@@ -15117,12 +15299,12 @@ init_dist();
 init_dist();
 init_dist2();
 import { Command as Command23 } from "commander";
-import fs25 from "fs";
+import fs23 from "fs";
 import { fileURLToPath as fileURLToPath5 } from "url";
-import { dirname as dirname6, join as join26 } from "path";
+import { dirname as dirname5, join as join26 } from "path";
 import chalk23 from "chalk";
 function runConfigCheck(opts) {
-  const raw = JSON.parse(fs25.readFileSync(opts.configPath, "utf-8"));
+  const raw = JSON.parse(fs23.readFileSync(opts.configPath, "utf-8"));
   const def = getDefaultConfig();
   const items = detectDrift(raw, def);
   let working = raw;
@@ -15139,7 +15321,7 @@ function runConfigCheck(opts) {
     stamped = true;
   }
   if (opts.fix || opts.accept || stamped) {
-    fs25.writeFileSync(opts.configPath, JSON.stringify(working, null, 2) + "\n");
+    writeConfigFileSync(opts.configPath, JSON.stringify(working, null, 2) + "\n");
   }
   return { items, applied, remaining, stamped };
 }
@@ -15210,7 +15392,7 @@ function printItems(items) {
 var configCommand = new Command23("config").description("Inspect and reconcile squadrant config");
 configCommand.command("check").description("Detect config drift vs the current default schema").option("--fix", "Apply the safe tier (add missing, remove deprecated)", false).option("--accept", "Stamp the current version without changing config (dismiss advisories)", false).option("--json", "Output drift items as JSON", false).action((opts) => {
   const pkgVersion = readPkgVersion2();
-  if (!fs25.existsSync(DEFAULT_CONFIG_PATH)) {
+  if (!fs23.existsSync(DEFAULT_CONFIG_PATH)) {
     console.log(chalk23.yellow("No config found \u2014 run `squadrant init` first."));
     return;
   }
@@ -15255,8 +15437,8 @@ configCommand.command("set").description("Write a config value by dotted key (e.
   }
 });
 function readPkgVersion2() {
-  const pkgPath = join26(dirname6(fileURLToPath5(import.meta.url)), "..", "package.json");
-  return JSON.parse(fs25.readFileSync(pkgPath, "utf-8")).version;
+  const pkgPath = join26(dirname5(fileURLToPath5(import.meta.url)), "..", "package.json");
+  return JSON.parse(fs23.readFileSync(pkgPath, "utf-8")).version;
 }
 
 // packages/cli/src/commands/heal.ts
@@ -15280,6 +15462,15 @@ function buildHealStatus(components) {
 }
 async function runHealStatus(opts) {
   const { project, json, stdout, stderr } = opts;
+  const isDaemonAlive = opts.isDaemonAlive ?? (() => isDaemonSocketLive(SOCK));
+  if (!await isDaemonAlive()) {
+    if (json) {
+      stdout.write(JSON.stringify({ healthy: false, daemonUnreachable: true, components: [] }) + "\n");
+    } else {
+      stderr.write("daemon unreachable \u2014 start the daemon first (squadrant heal daemon)\n");
+    }
+    return 1;
+  }
   let rows;
   try {
     rows = await opts.queryHealth(project);
@@ -15411,7 +15602,7 @@ init_dist();
 init_dist2();
 init_runtime2();
 init_require_daemon();
-import { join as join27, dirname as dirname7 } from "path";
+import { join as join27, dirname as dirname6 } from "path";
 import { Command as Command27 } from "commander";
 import chalk27 from "chalk";
 async function runPing(project, message) {
@@ -15420,7 +15611,7 @@ async function runPing(project, message) {
   const resolved = resolveTarget(registry, config, project, false);
   await requireDaemon();
   await needRef(resolved);
-  const stateRoot = join27(dirname7(DEFAULT_CONFIG_PATH), "state");
+  const stateRoot = join27(dirname6(DEFAULT_CONFIG_PATH), "state");
   await appendCaptainMessage({
     stateRoot,
     project,
@@ -15497,8 +15688,8 @@ var cmuxCommand = new Command28("cmux").description("cmux integration helpers").
 // packages/cli/src/commands/effort.ts
 init_dist();
 init_dist2();
-import fs26 from "fs";
-import path27 from "path";
+import fs24 from "fs";
+import path28 from "path";
 import { Command as Command29 } from "commander";
 import chalk29 from "chalk";
 var VALID_EFFORTS = ["max", "balance", "low"];
@@ -15541,9 +15732,9 @@ function effortScopeLabel(projectName) {
 }
 function canonical(p) {
   try {
-    return fs26.realpathSync(p);
+    return fs24.realpathSync(p);
   } catch {
-    return path27.resolve(p);
+    return path28.resolve(p);
   }
 }
 async function notifyCaptainsOfEffort(effort, config, driver, cwd = process.cwd(), append, scopeProject, projectConfigRoot) {
@@ -15593,7 +15784,7 @@ var effortCommand = new Command29("effort").description("Get or set the crew tok
     const config = loadConfig();
     const registry = new RuntimeRegistry2({ cmux: createCmuxDriver2() });
     const driver = registry.global(config);
-    const stateRoot = path27.join(path27.dirname(DEFAULT_CONFIG_PATH), "state");
+    const stateRoot = path28.join(path28.dirname(DEFAULT_CONFIG_PATH), "state");
     const append = (project, text) => appendCaptainMessage({ stateRoot, project, text, source: "daemon" });
     await notifyCaptainsOfEffort(effort, config, driver, process.cwd(), append, options.project);
   } catch {
@@ -15603,13 +15794,13 @@ var effortCommand = new Command29("effort").description("Get or set the crew tok
 
 // packages/cli/src/commands/tokens.ts
 init_dist();
-import fs27 from "fs";
-import path28 from "path";
+import fs25 from "fs";
+import path29 from "path";
 import os15 from "os";
 import readline3 from "readline";
 import { Command as Command30 } from "commander";
 import chalk30 from "chalk";
-var CLAUDE_PROJECTS_DIR = path28.join(os15.homedir(), ".claude", "projects");
+var CLAUDE_PROJECTS_DIR = path29.join(os15.homedir(), ".claude", "projects");
 function parseTranscriptLine(rawLine) {
   const line = rawLine.trim();
   if (!line) return { timestamp: null, usage: null };
@@ -15659,7 +15850,7 @@ function foldTranscriptLine(agg, rawLine, state) {
 async function aggregateTranscriptFile(filePath) {
   const agg = emptySessionAggregate();
   const state = { lastCacheRead: null };
-  const rl = readline3.createInterface({ input: fs27.createReadStream(filePath), crlfDelay: Infinity });
+  const rl = readline3.createInterface({ input: fs25.createReadStream(filePath), crlfDelay: Infinity });
   for await (const line of rl) {
     foldTranscriptLine(agg, line, state);
   }
@@ -15727,22 +15918,22 @@ function buildRoleReport(role, sessions) {
 }
 async function readdirSafe(dir) {
   try {
-    return await fs27.promises.readdir(dir);
+    return await fs25.promises.readdir(dir);
   } catch {
     return [];
   }
 }
 async function listJsonlFiles(dir) {
   const entries = await readdirSafe(dir);
-  return entries.filter((e) => e.endsWith(".jsonl")).map((e) => path28.join(dir, e));
+  return entries.filter((e) => e.endsWith(".jsonl")).map((e) => path29.join(dir, e));
 }
 async function findTranscriptDirs(claudeProjectsDir, captainSlug) {
   const entries = await readdirSafe(claudeProjectsDir);
   const captainDirs = [];
   const crewDirs = [];
   for (const entry of entries) {
-    if (entry === captainSlug) captainDirs.push(path28.join(claudeProjectsDir, entry));
-    else if (isCrewDirName(entry, captainSlug)) crewDirs.push(path28.join(claudeProjectsDir, entry));
+    if (entry === captainSlug) captainDirs.push(path29.join(claudeProjectsDir, entry));
+    else if (isCrewDirName(entry, captainSlug)) crewDirs.push(path29.join(claudeProjectsDir, entry));
   }
   return { captainDirs, crewDirs };
 }
@@ -15894,12 +16085,12 @@ var tokensCommand = new Command30("tokens").description(
 // packages/cli/src/commands/telegram.ts
 init_dist();
 init_dist2();
-import { join as join28, dirname as dirname8 } from "path";
+import { join as join28, dirname as dirname7 } from "path";
 import { emitKeypressEvents } from "readline";
 import { Command as Command31 } from "commander";
 import chalk31 from "chalk";
 function defaultStateRoot() {
-  return join28(dirname8(DEFAULT_CONFIG_PATH), "state");
+  return join28(dirname7(DEFAULT_CONFIG_PATH), "state");
 }
 async function questionMasked() {
   return new Promise((resolve4) => {
@@ -16229,8 +16420,8 @@ import { join as join29 } from "path";
 import { homedir as homedir21 } from "os";
 
 // packages/cli/src/lib/captain-session-registry.ts
-import fs28 from "fs";
-import path29 from "path";
+import fs26 from "fs";
+import path30 from "path";
 
 // packages/cli/src/lib/handoff-facts.ts
 var STALE_FETCH_WARNING_MS = 24 * 60 * 60 * 1e3;
@@ -16281,15 +16472,15 @@ function assembleHandoffFacts(live, claudeMem, gapSessions, checkpoint, now, ext
 // packages/cli/src/lib/captain-session-registry.ts
 var CAPTAIN_SESSION_REGISTRY_FILE = "captain-sessions.jsonl";
 function appendCaptainSession(spokeVault, record) {
-  fs28.mkdirSync(spokeVault, { recursive: true });
-  const file = path29.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
-  fs28.appendFileSync(file, JSON.stringify(record) + "\n");
+  fs26.mkdirSync(spokeVault, { recursive: true });
+  const file = path30.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
+  fs26.appendFileSync(file, JSON.stringify(record) + "\n");
 }
 function readCaptainSessionRegistry(spokeVault) {
-  const file = path29.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
-  if (!fs28.existsSync(file)) return [];
+  const file = path30.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
+  if (!fs26.existsSync(file)) return [];
   const records = [];
-  for (const line of fs28.readFileSync(file, "utf-8").split("\n")) {
+  for (const line of fs26.readFileSync(file, "utf-8").split("\n")) {
     if (!line.trim()) continue;
     try {
       records.push(JSON.parse(line));
@@ -16392,13 +16583,13 @@ function hooksCommand() {
 // packages/cli/src/commands/work.ts
 init_dist();
 init_dist2();
-import path30 from "path";
+import path31 from "path";
 import { Command as Command33 } from "commander";
 import chalk32 from "chalk";
 function detectCurrentProject(config, cwd = process.cwd()) {
   for (const [name, proj] of Object.entries(config.projects)) {
     const projPath = resolveHome(proj.path);
-    if (cwd === projPath || cwd.startsWith(projPath + path30.sep)) return name;
+    if (cwd === projPath || cwd.startsWith(projPath + path31.sep)) return name;
   }
   return void 0;
 }
@@ -16530,14 +16721,14 @@ var workCommand = new Command33("work").description("Track your own in-flight wo
 // packages/cli/src/commands/handoff.ts
 init_dist();
 import { Command as Command34 } from "commander";
-import path33 from "path";
+import path34 from "path";
 import os16 from "os";
 
 // packages/cli/src/lib/handoff-live-repo.ts
 init_dist();
 import { execFileSync as execFileSync8 } from "child_process";
-import fs29 from "fs";
-import path31 from "path";
+import fs27 from "fs";
+import path32 from "path";
 
 // packages/cli/src/lib/handoff-branch-state.ts
 function tryRun(runner, cmd, args, cwd) {
@@ -16676,7 +16867,7 @@ function localAheadOfBase(runner, projectPath, base) {
 }
 function readFetchAgeMs(projectPath, now) {
   try {
-    const stat2 = fs29.statSync(path31.join(projectPath, ".git", "FETCH_HEAD"));
+    const stat2 = fs27.statSync(path32.join(projectPath, ".git", "FETCH_HEAD"));
     return Math.max(0, now - stat2.mtime.getTime());
   } catch {
     return null;
@@ -16747,7 +16938,7 @@ function gatherLiveRepoState(projectPath, fallbackBaseBranch, tasks, runner = de
 
 // packages/cli/src/lib/handoff-claude-mem.ts
 import { createRequire } from "module";
-import fs30 from "fs";
+import fs28 from "fs";
 var { DatabaseSync } = createRequire(import.meta.url)("node:sqlite");
 var CLAUDE_MEM_RECENCY_LIMIT = 20;
 function decisionText(row) {
@@ -16761,7 +16952,7 @@ function decisionText(row) {
   return row.narrative ?? "";
 }
 function queryClaudeMem(dbPath, project) {
-  if (!fs30.existsSync(dbPath)) return null;
+  if (!fs28.existsSync(dbPath)) return null;
   let db;
   try {
     db = new DatabaseSync(dbPath, { readOnly: true });
@@ -16804,7 +16995,7 @@ function queryClaudeMem(dbPath, project) {
 }
 
 // packages/cli/src/lib/handoff-transcript.ts
-import fs31 from "fs";
+import fs29 from "fs";
 var TRANSCRIPT_BYTE_CAP = 2e5;
 function tailOf(content, byteCap) {
   const buf = Buffer.from(content, "utf-8");
@@ -16833,27 +17024,27 @@ function extractMessages(tailText) {
   return { lastUserMessage, lastAssistantText };
 }
 function extractTranscriptTail(transcriptPath, byteCap = TRANSCRIPT_BYTE_CAP) {
-  if (!fs31.existsSync(transcriptPath)) return null;
-  const content = fs31.readFileSync(transcriptPath, "utf-8");
+  if (!fs29.existsSync(transcriptPath)) return null;
+  const content = fs29.readFileSync(transcriptPath, "utf-8");
   const { lastUserMessage, lastAssistantText } = extractMessages(tailOf(content, byteCap));
-  const mtimeIso = fs31.statSync(transcriptPath).mtime.toISOString();
+  const mtimeIso = fs29.statSync(transcriptPath).mtime.toISOString();
   return { path: transcriptPath, mtimeIso, lastUserMessage, lastAssistantText };
 }
 
 // packages/cli/src/lib/handoff-archive.ts
-import fs32 from "fs";
-import path32 from "path";
+import fs30 from "fs";
+import path33 from "path";
 function readNewestArchivedHandoff(spokeVault, now) {
-  const dir = path32.join(spokeVault, "handoffs");
-  if (!fs32.existsSync(dir)) return null;
-  const candidates = fs32.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".json")).map((e) => {
-    const full = path32.join(dir, e.name);
-    return { name: e.name, full, mtime: fs32.statSync(full).mtime };
+  const dir = path33.join(spokeVault, "handoffs");
+  if (!fs30.existsSync(dir)) return null;
+  const candidates = fs30.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".json")).map((e) => {
+    const full = path33.join(dir, e.name);
+    return { name: e.name, full, mtime: fs30.statSync(full).mtime };
   }).sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
   for (const candidate of candidates) {
     let content;
     try {
-      content = JSON.parse(fs32.readFileSync(candidate.full, "utf-8"));
+      content = JSON.parse(fs30.readFileSync(candidate.full, "utf-8"));
     } catch {
       continue;
     }
@@ -16863,7 +17054,7 @@ function readNewestArchivedHandoff(spokeVault, now) {
 }
 
 // packages/cli/src/commands/handoff.ts
-var CLAUDE_MEM_DB_PATH = path33.join(os16.homedir(), ".claude-mem", "claude-mem.db");
+var CLAUDE_MEM_DB_PATH = path34.join(os16.homedir(), ".claude-mem", "claude-mem.db");
 async function defaultFetchTasks(project) {
   return await squadrantdCall({ kind: "list", project });
 }
@@ -16922,8 +17113,8 @@ init_dist();
 init_dist();
 init_dist();
 init_dist();
-var __dirname = dirname9(fileURLToPath6(import.meta.url));
-var pkg = JSON.parse(readFileSync16(join30(__dirname, "..", "package.json"), "utf-8"));
+var __dirname = dirname8(fileURLToPath6(import.meta.url));
+var pkg = JSON.parse(readFileSync15(join30(__dirname, "..", "package.json"), "utf-8"));
 ensureRuntimeSynced({
   sourceRoot: join30(__dirname, ".."),
   runtimeRoot: join30(homedir22(), ".config", "squadrant")
@@ -16932,11 +17123,11 @@ if (process.argv[2] !== "config") {
   try {
     const cfgPath = join30(homedir22(), ".config", "squadrant", "config.json");
     if (existsSync13(cfgPath)) {
-      const cfg = JSON.parse(readFileSync16(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readConfigFileSync(cfgPath));
       if (needsCheck(cfg, pkg.version)) {
         const items = detectDrift(cfg, getDefaultConfig());
         if (items.length === 0) {
-          writeFileSync12(cfgPath, JSON.stringify(withStamp(cfg, pkg.version), null, 2) + "\n");
+          writeConfigFileSync(cfgPath, JSON.stringify(withStamp(cfg, pkg.version), null, 2) + "\n");
         } else {
           const from = cfg._squadrantVersion ?? "an earlier version";
           process.stderr.write(